CVE-2025-68163: XSS
Published Dec 16, 2025
·Updated
In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page
Affected Software
2 affected components
JetBrains TeamCity<2025.11
JetBrains TeamCity<2025.11
Event History
Dec 16, 2025
CVE Published
via MITRE·03:27 PM
Data Sourced
via MITRE·03:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-68163?
CVE-2025-68163 has been assessed as a medium severity vulnerability due to its potential for stored XSS attacks.
2
How do I fix CVE-2025-68163?
To fix CVE-2025-68163, upgrade JetBrains TeamCity to version 2025.11 or later.
3
What versions of JetBrains TeamCity are affected by CVE-2025-68163?
CVE-2025-68163 affects all JetBrains TeamCity versions prior to 2025.11.
4
What type of vulnerability is CVE-2025-68163?
CVE-2025-68163 is a stored cross-site scripting (XSS) vulnerability.
5
Where is the vulnerability located in JetBrains TeamCity for CVE-2025-68163?
The vulnerability in CVE-2025-68163 is found on the agentpushInstall page of JetBrains TeamCity.