CVE-2024-36371: XSS
Published May 29, 2024
·Updated
In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible
Affected Software
3 affected components
JetBrains TeamCity<2023.05.6
JetBrains TeamCity<2023.05.6
JetBrains TeamCity>=2023.11<2023.11.5
Event History
May 29, 2024
CVE Published
via MITRE·01:29 PM
Data Sourced
via MITRE·01:29 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36371?
CVE-2024-36371 is considered a high-severity vulnerability due to the potential for stored XSS attacks.
2
How do I fix CVE-2024-36371?
To fix CVE-2024-36371, upgrade JetBrains TeamCity to version 2023.05.6 or later.
3
What type of vulnerability is CVE-2024-36371?
CVE-2024-36371 is a stored cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2024-36371?
CVE-2024-36371 affects users of JetBrains TeamCity versions prior to 2023.05.6 and versions between 2023.11 and 2023.11.5.
5
Is CVE-2024-36371 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2024-36371.