« Volver al listado

CVE-2025-52876

Estado: AnalizadaMedia (5.4)—

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Jetbrains — Teamcity

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-52876",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-52876",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-23T17:43:32.608404Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@jetbrains.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "cve@jetbrains.com",
      "affectedData": [
        {
          "vendor": "JetBrains",
          "product": "TeamCity",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2025.03.3",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-06-23T15:15:28.447",
  "references": [
    {
      "url": "https://www.jetbrains.com/privacy-security/issues-fixed/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@jetbrains.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@jetbrains.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible"
    },
    {
      "lang": "es",
      "value": "En JetBrains TeamCity antes del 3/03/2025 era posible XSS reflejado en la página favoriteIcon "
    }
  ],
  "lastModified": "2026-06-17T09:37:11.813",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C27AC44-E711-4B67-86F8-8A45ED7A29C5",
              "versionEndExcluding": "2025.03.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@jetbrains.com"
}