In JetBrains TeamCity prior to 2023.05.3 reflected XSS was possible during copying Build Step
jetbrains teamcity