CVE-2024-36363

CVSS 3.1 Score 4.6 of 10 (medium)

Details

Published May 29, 2024
CWE ID 79

Summary

CVE-2024-36363 is a vulnerability found in JetBrains TeamCity versions before 2022.04.6, 2022.10.5, 2023.05.5, and 2023.11.5, which allows for Stored Cross-Site Scripting (XSS) attacks in code inspection reports. The risk score is rated as 5, with a base severity of MEDIUM and a base score of 4.6 according to the CVSS:3.1 rating system. The vulnerability requires low privileges and user interaction is required for exploitation. The attack vector is through the network, with low impacts on integrity and confidentiality, and no availability impact. The potential danger includes the possibility of malicious code injection and the compromise of sensitive data on affected systems. No remediation steps or further analysis are provided in the available information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-36363 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options