Stored XSS Vulnerability in JetBrains TeamCity via Jira Integration
CVE-2025-47853

5.4MEDIUM

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
20 May 2025

What is CVE-2025-47853?

A stored Cross-Site Scripting (XSS) vulnerability exists in JetBrains TeamCity before version 2025.03.2, allowing attackers leveraging Jira integration to execute arbitrary scripts within the browser of users who access the compromised content. This vulnerability may enable unauthorized actions to be performed on behalf of the user, potentially impacting data integrity and user privacy. It is recommended to upgrade to the latest version to mitigate this risk.

Affected Version(s)

TeamCity 0 < 2025.03.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-47853 : Stored XSS Vulnerability in JetBrains TeamCity via Jira Integration