Vulnerabilities

TI-2024-31531 CVE-2024-47162 · GHSA-8w47-g5wh-386w

In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

LOW 24

In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2024-09-19 Fixed in 2024.3.44799 CWE-522

TI-2024-31529 CVE-2024-47160 · GHSA-23p2-2jrp-5wcp

LOW 24

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00371 Published 2024-09-19 Fixed in 2024.3.44799 CWE-863

TI-2024-31528 CVE-2024-47159 · GHSA-r7hv-2fgc-3qj2

LOW 20

In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00334 Published 2024-09-19 Fixed in 2024.3.44799 CWE-863