CVE-2023-34221

MediumCVSS 4.6

Published: 31/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

59th percentile - higher than 59% of all known CVEs

In JetBrains TeamCity versions before 2023.05, a stored XSS vulnerability existed on the 'Show Connection' page.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 2023.05 or later to mitigate this vulnerability.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible