CVE-2024-48902

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Oct 10, 2024
Updated: Oct 16, 2024
CWE ID 862

Summary

CVE-2024-48902 is a vulnerability affecting JetBrains YouTrack versions prior to 2024.3.46677. This issue involves improper access control, allowing users with project update permissions to delete applications via the API. This could potentially lead to data loss or disruption of services for affected organizations. Users are encouraged to upgrade to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • JetBrains YouTrack

Affected Vendors

  • JetBrains

Advisories, Assessments, and Mitigations