CVE-2024-43808 in TeamCity

Summary

by MITRE • 08/16/2024

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: JetBrains
• Reservation: 08/16/2024
• Disclosure: 08/16/2024
• Moderation: accepted
• Entry: VDB-274870
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 5.4 (NVD)
• EPSS: 0.04783
• KEV: no
• Activities: very low
• Sector: Telecommunication, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-43808
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-43808
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-43808/