In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
CWE-79