In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
CVE ID: CVE-2025-24459
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.6
Vendor: JetBrains
Product: TeamCity
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 19.49% (scored less or equal to compared to others)
EPSS Date: 2025-02-19 (when was this score calculated)