CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

creationtimestamp| type| source ---|---|--- 2024-12-20 14:32:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685635609604446 2024-12-20 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqojbuf422t 2024-12-20 16:45:00+00:00| seen|...

CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

JetBrains TeamCity before 2024.12 is affected by a stored XSS vulnerability via the image name on the agent details page. Affected product: JetBrains TeamCity (server-side UI component handling agent details). Root cause: lack of proper encoding/filtering of user-supplied image name data leading ...