YouTrack User Access Tokens Vulnerability
CVE-2024-38505

7.5HIGH

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
18 June 2024

What is CVE-2024-38505?

In JetBrains YouTrack, a vulnerability was identified that allows user access tokens to be inadvertently transmitted to third-party sites. This behavior compromises user security and could lead to unauthorized access to sensitive information. Users of YouTrack versions prior to 2024.2.34646 should take immediate action to protect their environments. Regular security assessments and updates are recommended to mitigate the risk associated with this vulnerability.

Affected Version(s)

YouTrack 0 < 2024.2.34646

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.