In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/
