CVE-2024-36366: JetBrains TeamCity

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations

Affected products

• JetBrains TeamCity: before 2022.04.7 (fixed in 2022.04.7); from 2022.10, before 2022.10.6 (fixed in 2022.10.6); from 2023.05, before 2023.05.6 (fixed in 2023.05.6); from 2023.11, before 2023.11.5 (fixed in 2023.11.5)

Published 2024-05-29. Last modified 2026-06-17.