JetBrains TeamCity favoriteIcon page cross-site scripting vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

CVE-2025-52876

CVE-2025-52876 refers to a reflected cross-site scripting (XSS) vulnerability in JetBrains TeamCity’s favoriteIcon page. Affected product: JetBrains TeamCity (versions prior to 2025.03.3). Root cause: lack of proper filtering/escaping of user-supplied data on the favoriteIcon page, enabling an at...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...