Stored XSS in JetBrains TeamCity Affects Cloud Profiles Configuration
CVE-2023-41248
4.6MEDIUM
What is CVE-2023-41248?
A stored cross-site scripting vulnerability exists in JetBrains TeamCity affecting the configuration of Cloud Profiles. This issue allows an attacker to inject malicious scripts into the affected environment, potentially jeopardizing the security of user sessions and impacting the integrity of the application. Users of versions prior to 2023.05.3 should update promptly to mitigate the risk associated with this vulnerability.
Affected Version(s)
TeamCity 0 < 2023.05.3