YouTrack User Access Tokens Vulnerability
CVE-2024-38505
7.5HIGH
Summary
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
Affected Version(s)
YouTrack < 2024.2.34646
Refferences
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability Reserved
Vulnerability published
Collectors
NVD DatabaseMitre Database