CVE-2024-35300CWE-79

In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible

Low · published May 16, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
20.7
In the wild
Unconfirmed
What it is

In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-05-16T10:31Z
EPSS history
Timeline
  • 16 MAY 10:31Z
    In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible
    cvelistv5