In JetBrains TeamCity before 2025.11 stored XSS was possible via session attributeReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/
