CVE-2025-47851 – JetBrains TeamCity Stored XSS Vulnerability

May 20, 2025

CVE ID : CVE-2025-47851

Published : May 20, 2025, 6:15 p.m. | 34 minutes ago

Description : In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-47852 – JetBrains TeamCity Stored XSS Vulnerability

Next Article CVE-2025-47850 – JetBrains YouTrack Attachment Visibility Bypass

Highlights

CVE-2025-31651 – Apache Tomcat Improper Neutralization of Escape, Meta, or Control Sequences

April 28, 2025

CVE ID : CVE-2025-31651

Published : April 28, 2025, 8:15 p.m. | 2 hours, 50 minutes ago

Description : Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible
for a specially crafted request to bypass some rewrite rules. If those
rewrite rules effectively enforced security constraints, those
constraints could be bypassed.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102.

Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-47851 – JetBrains TeamCity Stored XSS Vulnerability

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Verizon is offering a free iPhone 16 Pro Max – here’s how you can get one

Generating audio for video

CVE-2025-38338 – “NFS Linux Kernel Deadlock and Unlocked Folio Vulnerability”

The utterly crazy story of the death threat hacker (involves a cat)

CVE-2025-31651 – Apache Tomcat Improper Neutralization of Escape, Meta, or Control Sequences

CVE-2024-39730 – IBM Datacap Navigator Click Hijacking Vulnerability

CVE-2025-4238 – PCMan FTP Server MGET Command Handler Buffer Overflow

GSAP is Now Completely Free, Even for Commercial Use!

CVE-2025-47851 – JetBrains TeamCity Stored XSS Vulnerability

Related Posts