CVE-2024-28229

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Mar 7, 2024

Updated: Dec 16, 2024

CWE ID 863

Summary

CVE-2024-28229 is a vulnerability affecting JetBrains YouTrack versions prior to 2024.1.25893. This issue grants users without proper permissions the ability to restore issues and articles. This could potentially lead to unintended modifications or exposure of sensitive data. Users are advised to update their YouTrack installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

JetBrains YouTrack

Affected Vendors

JetBrains

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/uyqgw8
https://www.cve.org/CVERecord?id=CVE-2024-28229
https://nvd.nist.gov/vuln/detail/CVE-2024-28229

Back to Vulnerability Database