cbcvebase.
CVE-2025-68165
published 2025-12-16

CVE-2025-68165: In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

PriorityP432medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
3.46%
87.6th percentile
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

Affected

1 ranges
VendorProductVersion rangeFixed in
jetbrainsteamcity< 2025.112025.11
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.