The host is installed with JetBrains TeamCity before 2018.2.3 and is prone to a code injection vulnerability. A flaw is present in the application, which fails to handle unspecified vectors. Successful exploitation allows an attacker to cause stored JavaScript injection which requires a deliberate server administrator action.