CVE-2021-43197: JetBrains TeamCity

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.

Affected products

• JetBrains TeamCity: before 2021.1.2 (fixed in 2021.1.2)

Published 2021-11-09. Last modified 2026-06-17.