CVE-2024-56355

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Dec 20, 2024

Updated: Jan 2, 2025

CWE ID 79

Summary

CVE-2024-56355 is a newly disclosed cybersecurity vulnerability affecting JetBrains TeamCity. This issue arises from a missing Content-Type header in responses from the RemoteBuildLogController, which could pave the way for Cross-Site Scripting (XSS) attacks. An attacker, upon successfully exploiting this flaw, could inject malicious scripts into a victim's browser, potentially leading to data theft or unauthorized access. Upgrading to TeamCity 2024.12 or applying the relevant patch is recommended to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

TeamCity

Affected Vendors

JetBrains

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/1xoeDy
https://www.cve.org/CVERecord?id=CVE-2024-56355
https://nvd.nist.gov/vuln/detail/CVE-2024-56355

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners