CVE-2024-54157

Summary

CVE-2024-54157 is a vulnerability affecting JetBrains YouTrack versions prior to 2024.3.52635. This issue stems from a vulnerable Regular Expression (RegExp) in the Ruby syntax detector. An attacker could potentially exploit this weakness to perform ReDoS (Regular Expression Denial of Service) attacks, leading to denial of service conditions or resource exhaustion. It is essential for users to upgrade to a patched version of YouTrack to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.