CVE-2025-47853 MEDIUM

CVE-2025-47853

Vendor Jetbrains

Product TeamCity

Weakness CWE-79 · XSS

Published May 20, 2025

Last update May 20, 2025

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible

Key dates

02Disclosure timeline

May 20, 2025 CVE published

May 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-47853 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-44042 WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-23434 WordPress Easy EU Cookie law plugin <= 1.3.3.1 - Stored Cross Site Scripting (XSS) vulnerability CVE-2022-3036 Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting CVE-2024-9219 WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting CVE-2025-5289 3D FlipBook - Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters