Vulnerabilities

TI-2024-18789 CVE-2024-28230 · GHSA-rvrg-fhg3-jqxr

Missing authorization in JetBrains YouTrack

LOW 29

In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0052 Published 2024-03-07 Fixed in 2024.1.25893 CWE-862

TI-2024-18788 CVE-2024-28229 · GHSA-v76m-v8ff-rhq8

LOW 29

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0052 Published 2024-03-07 Fixed in 2024.1.25893 CWE-863

TI-2024-18787 CVE-2024-28228 · GHSA-c5pg-crr2-c647

LOW 31

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00483 Published 2024-03-07 Fixed in 2024.1.25893 CWE-290