CVE-2024-28230
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 7, 2024
Updated: Dec 16, 2024
CWE ID 862
Summary
CVE-2024-28230 is a newly disclosed vulnerability affecting JetBrains YouTrack versions prior to 2024.1.25893. This issue permits users to manipulate workflows, including attaching and detaching them from a project, without requiring admin permissions. This vulnerability could potentially allow unauthorized modifications to workflows, impacting the integrity of project configurations. It's essential for organizations using YouTrack to update their software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- JetBrains YouTrack
Affected Vendors
- JetBrains