CVE-2024-28230

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Mar 7, 2024
CWE ID 862

Summary

CVE-2024-28230 is a cybersecurity vulnerability affecting JetBrains YouTrack versions prior to 2024.1.25893. This issue allows users to attach or detach workflows from a project without requiring admin permissions, which could potentially lead to unintended changes and disruptions to the project workflow. This vulnerability poses a risk to organizations using YouTrack for managing workflows and project processes. It is recommended that users upgrade to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share