CNNVD-202512-2872 Information

CNNVD ID

CNNVD-202512-2872

CVE-2025-68268

  • CNNVD Published: 2025-12-16

Description (Chinese)

JetBrains TeamCity是捷克JetBrains公司的一套分布式构建管理和持续集成工具。该工具提供持续单元测试、代码质量分析和构建问题分析报告等功能。 JetBrains TeamCity 2025.11.1之前版本存在跨站脚本漏洞,该漏洞源于存储设置页面存在反射型跨站脚本漏洞。

Description (English)

Jetbrains TeamCity is a distributed set of building management and continuous integration tools for Czech Jetbrains. The tool provides continuous modular testing, code quality analysis and construction analysis. The pre-Jetbrain TeamCity 2025.11.1 version has a cross-site script loophole, which stems from the reflection-type cross-site script gap on the storage settings page.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

JetBrains

Published

2025-12-16

Last Modified

2026-02-24

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Patch

https://www.jetbrains.com/privacy-security/issues-fixed/

Share on: