CVE-2019-15848

Publication date

2019-09-05 19:38:45

Family

mitre

State

PUBLISHED

Description

JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.