CNNVD-202512-2871 Information

CNNVD ID

CNNVD-202512-2871

CVE-2025-68163

  • CNNVD Published: 2025-12-16

Description (Chinese)

JetBrains TeamCity是捷克JetBrains公司的一套分布式构建管理和持续集成工具。该工具提供持续单元测试、代码质量分析和构建问题分析报告等功能。 JetBrains TeamCity 2025.11之前版本存在跨站脚本漏洞,该漏洞源于agentpushInstall页面存在存储型跨站脚本漏洞。

Description (English)

Jetbrains TeamCity is a distributed set of building management and continuous integration tools for Czech Jetbrains. The tool provides continuous modular testing, code quality analysis and construction analysis. The pre-JetBrains TeamCity 2025.11 version has a cross-site script loophole, which stems from the storage-type cross-site script gap on the install page.

Hazard Level

Critical

Vulnerability Type

跨站脚本

Affected Vendor

JetBrains

Published

2025-12-16

Last Modified

2026-02-24

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Patch

https://www.jetbrains.com/privacy-security/issues-fixed/

Share on: