In JetBrains TeamCity prior to 2023.11.2 stored XSS via agent distribution was possible
jetbrains teamcity