CVE-2025-31140CWE-79

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

Medium · published March 27, 2025

CVSS v3.1

4.6

EPSS

28%

Percentile

98.1

In the wild

Unconfirmed

What it is

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

The record

Technical detail

CVSS v3.1: 4.6 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.28035 · 98.1th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2025-03-27T11:24Z

EPSS history

Timeline

07 SEP 03:28Z
EPSS moved 17% → 28%
epss
06 SEP 03:27Z
EPSS moved 17% → 28%
epss
04 SEP 03:34Z
EPSS moved 28% → 17%
epss
03 SEP 03:25Z
EPSS moved 28% → 17%
epss
27 MAR 11:24Z
In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page
cvelistv5