PT-2024-7659
CVE-2024-43810
·
تاريخ النشر
2024-08-16
·
تاريخ التحديث
2025-03-31
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
JetBrains TeamCity versions prior to 2024.07.1
Description
The issue is related to a reflected XSS vulnerability in the AWS Core plugin of the JetBrains TeamCity system. This vulnerability exists due to inadequate protection of the web page structure, allowing a remote attacker to perform cross-site scripting.
Recommendations
For versions prior to 2024.07.1, update to version 2024.07.1 or later to resolve the issue. As a temporary workaround, consider disabling the AWS Core plugin until a patch is available. Restrict access to the plugin to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾