CVE-2022-24339: 
JetBrains TeamCity vulnerability analysis and mitigation

JetBrains TeamCity before version 2021.2.1 was vulnerable to stored Cross-Site Scripting (XSS). The vulnerability was discovered and disclosed in early 2022, affecting the TeamCity continuous integration and deployment platform (CVE Details).

The vulnerability is classified as a stored Cross-Site Scripting (XSS) issue, which allows attackers to inject and store malicious scripts that are later executed when other users access the affected pages. This type of vulnerability typically occurs when user input is not properly sanitized before being stored and displayed back to users.

A successful exploitation of this stored XSS vulnerability could allow attackers to execute arbitrary JavaScript code in the context of other users' browsers. This could lead to session hijacking, theft of sensitive information, or manipulation of the TeamCity interface for affected users.

The vulnerability was fixed in TeamCity version 2021.2.1. Organizations using affected versions should upgrade to TeamCity 2021.2.1 or later to protect against this security issue (JetBrains Security).