CVE-2024-56352

Summary

CVE-2024-56352 is a recently disclosed vulnerability affecting JetBrains TeamCity versions prior to 2024.12. Maliciously crafted image names on the agent details page could be exploited to inject and execute malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. An attacker could potentially gain unauthorized access to user sessions or steal sensitive information by manipulating the image names. This vulnerability poses a significant risk to TeamCity users and requires immediate attention and patch application to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.