CVE-2024-56355

In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@jetbrains.com

Published

2024-12-20

Last modified

2024-12-20

Weaknesses

CWE-79

Affected products

• Teamcity (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/