Lucene search
HistoryJun 18, 2024 - 11:15 a.m.
CVE-2024-38505
jetbrains
youtrack
user access token
third-party site
security issue
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
9.1%
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
Related
vulnrichment
vulnrichment
CVE-2024-38505
2024-06-18 10:42:07
cvelist
cvelist
CVE-2024-38505
2024-06-18 10:42:07
cve
cve
CVE-2024-38505
2024-06-18 11:15:51
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-38505