CVE Catalog
CVE-2023-34222
MediumCVSS 4.6Exploitation Probability (EPSS)
Elevated risk1.04%
60th percentile - higher than 60% of all known CVEs
Summary
In JetBrains TeamCity before version 2023.05, an XSS vulnerability was possible in the Plugin Vendor URL.
Risk Assessment
An XSS attack can lead to session hijacking or injection of malicious code, posing a threat to data security within the organization.
Recommendation
It is recommended to update JetBrains TeamCity to the latest version to mitigate this vulnerability.
Original NVD description (English source)
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible