CVE-2022-48428 MEDIUM

CVE-2022-48428

Vendor Jetbrains

Product TeamCity

Weakness CWE-79 · XSS

Published March 27, 2023

Last update February 19, 2025

View on NVD All CVEs

CVSS base score

4.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

Key dates

02Disclosure timeline

March 27, 2023 CVE published

February 19, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-48428 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-9130 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode CVE-2022-2814 SourceCodester Simple and Nice Shopping Cart Script login.php cross site scripting CVE-2025-58989 WordPress Dynamic Text Field For Contact Form 7 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability CVE-2024-2958 SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-6433 Cross-site Scripting vulnerability in BigProf products