Vulnerabilities

TI-2024-36273 CVE-2024-54158 · GHSA-mj26-h3p5-rj2m

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

LOW 24

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2024-12-04 Fixed in 2024.3.52635 CWE-173

TI-2024-36272 CVE-2024-54157 · GHSA-r5q6-3ggj-5g3c

LOW 30

In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00596 Published 2024-12-04 Fixed in 2024.3.52635 CWE-1333

TI-2024-36271 CVE-2024-54156 · GHSA-4vgc-rwr6-7j6r

LOW 29

In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00342 Published 2024-12-04 Fixed in 2024.3.52635 CWE-1321