CVE-2025-54534 MEDIUM

CVE-2025-54534

Vendor Jetbrains

Product TeamCity

Weakness CWE-79 · XSS

Published July 28, 2025

Last update July 28, 2025

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page

Key dates

02Disclosure timeline

July 28, 2025 CVE published

July 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-54534 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-53966 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-47704 Klaro Cookie & Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-050 CVE-2026-27177 MajorDoMo Stored Cross-Site Scripting via Property Set Endpoint CVE-2025-13853 Nearby Now Reviews <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2025-58605 WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability