CVE-2024-36368

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible
Configurations

No configuration.

History

31 May 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) En JetBrains TeamCity antes de 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 XSS reflejado a través de la configuración del proveedor OAuth era posible
Summary (en) In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 reflected XSS via OAuth provider configuration was possible (en) In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible

29 May 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-29 14:15

Updated : 2024-05-31 14:15


NVD link : CVE-2024-36368

Mitre link : CVE-2024-36368

CVE.ORG link : CVE-2024-36368


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')