CVE-2023-38066

MediumCVSS 4.6

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

55th percentile - higher than 55% of all known CVEs

Summary

In JetBrains TeamCity versions before 2023.05.1, reflected XSS via the Referer header was possible during artifact downloads.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious scripts in the user's context, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to upgrade to version 2023.05.1 or later to mitigate this vulnerability.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads