CVE-2024-43809 LOW

CVE-2024-43809

Vendor Jetbrains

Product TeamCity

Weakness CWE-79 · XSS

Published August 16, 2024

Last update August 16, 2024

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page

Key dates

02Disclosure timeline

August 16, 2024 CVE published

August 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-43809 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2026-53606 sanitize-html has an incomplete URI scheme validation that allows javascript: URIs through action, formaction, data, poster, and background attributes CVE-2025-5336 Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter CVE-2024-11753 UMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-1616 XiaoBingBy TeaCMS Article Title cross site scripting CVE-2023-3381 SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting