CVE-2024-43810

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.07.1

Description The issue is related to a reflected XSS vulnerability in the AWS Core plugin of the JetBrains TeamCity system. This vulnerability exists due to inadequate protection of the web page structure, allowing a remote attacker to perform cross-site scripting.

Recommendations For versions prior to 2024.07.1, update to version 2024.07.1 or later to resolve the issue. As a temporary workaround, consider disabling the AWS Core plugin until a patch is available. Restrict access to the plugin to minimize the risk of exploitation.