CVE-2024-47159
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-47159 is a vulnerability found in JetBrains YouTrack versions prior to 2024.3.44799, where users lacking appropriate permissions can restore workflows associated with a project. This flaw is categorized under CWE-863, which denotes incorrect authorization, and poses a medium severity risk with an exploitability score of 2.8. The vulnerability allows for potential integrity impacts due to unauthorized changes within project workflows, although there are no confidentiality or availability impacts reported. Organizations can mitigate this risk by updating their YouTrack installations to the latest version provided by JetBrains. For further information on affected products and remediation, users can refer to the vendor's advisory at JetBrains' official website.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.