JetBrains TeamCity: CVE-2022-48427: Stored XSS on “Pending changes” and “Changes” tabs was possible (TW-80199)

JetBrains TeamCity: CVE-2022-48427: Stored XSS on “Pending changes” and “Changes” tabs was possible (TW-80199)

Severity

5

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:N)

Published

03/27/2023

Created

10/22/2024

Added

10/15/2024

Modified

02/03/2025

Description

In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible

Solution(s)

• jetbrains-teamcity-upgrade-latest

References

• https://attackerkb.com/topics/cve-2022-48427
• CVE - 2022-48427
• https://www.jetbrains.com/privacy-security/issues-fixed/