Lucene search

K
nvd[email protected]NVD:CVE-2024-35302
HistoryMay 16, 2024 - 11:15 a.m.

CVE-2024-35302

2024-05-1611:15:48
CWE-79
web.nvd.nist.gov
1
jetbrains
teamcity
2023.11
restore
stored xss

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

0

Percentile

9.0%

In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-35302