In JetBrains TeamCity prior to 2024.03 reflected XSS was possible via Space connection configuration
jetbrains teamcity