CVE-2025-31140: XSS
Published Mar 27, 2025
·Updated
In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page
Affected Software
2 affected components
JetBrains TeamCity<2025.03
JetBrains TeamCity<2025.03
Event History
Mar 27, 2025
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31140?
CVE-2025-31140 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2025-31140?
To fix CVE-2025-31140, upgrade JetBrains TeamCity to version 2025.03 or later.
3
What type of vulnerability is CVE-2025-31140?
CVE-2025-31140 is a stored cross-site scripting (XSS) vulnerability.
4
Where does CVE-2025-31140 occur in JetBrains TeamCity?
CVE-2025-31140 occurs on the Cloud Profiles page of JetBrains TeamCity.
5
Who is affected by CVE-2025-31140?
Users of JetBrains TeamCity versions prior to 2025.03 are affected by CVE-2025-31140.