CVE-2023-38066

Summary

CVE-2023-38066 is a newly disclosed vulnerability in JetBrains TeamCity, affecting versions prior to 2023.05.1. This issue permits Cross-Site Scripting (XSS) attacks through maliciously crafted Referer headers during artifact downloads. An attacker could exploit this vulnerability to inject malicious scripts into a victim's web browser, leading to potential data theft, unauthorized account access, or other malicious activities. TeamCity users are urged to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.