CVE-2023-38061

MediumCVSS 4.6

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

55th percentile - higher than 55% of all known CVEs

In JetBrains TeamCity versions before 2023.05.1, stored XSS was possible when using a custom theme.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 2023.05.1 or later to mitigate this vulnerability.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible