Stored XSS Vulnerability in JetBrains TeamCity Configuration
CVE-2023-43566

3.5LOW

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
19 September 2023

What is CVE-2023-43566?

A stored XSS vulnerability has been identified in JetBrains TeamCity prior to version 2023.05.4, which allows attackers to inject malicious scripts during node configuration. This flaw could potentially compromise the integrity and confidentiality of user data, posing a significant risk to organizations utilizing this software.

Affected Version(s)

TeamCity 0 < 2023.05.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-43566 : Stored XSS Vulnerability in JetBrains TeamCity Configuration