CVE-2023-38063

MediumCVSS 4.6

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

55th percentile - higher than 55% of all known CVEs

In JetBrains TeamCity before version 2023.05.1, it was possible to perform a stored XSS attack while running custom builds.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 2023.05.1 or later to mitigate this vulnerability.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible