CVE-2024-38504

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...

CVE-2024-38505

In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site...

CVE-2024-38506

In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows...

CVE-2024-38506

JetBrains YouTrack (affected: versions before 2024.2.34646) contains a vulnerability where a user without appropriate permissions could enable the auto-attach option for workflows. The issue is documented in CVE-2024-38506; the available sources describe the affected product/version and the misco...

CVE-2024-38506

In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows...

CVE-2024-38505

In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site...

CVE-2024-38505

In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site...

CVE-2024-38505

JetBrains YouTrack (versions prior to 2024.2.34646) is affected by CVE-2024-38505 due to insufficient protection in the Access Token Handler, allowing user access tokens to be sent to a third-party site. The issue could permit unauthorized access to protected information. Remediation: upgrade to ...

CVE-2024-38504

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...

CVE-2024-38504

CVE-2024-38504 impacts JetBrains YouTrack prior to 2024.2.34646, where the Guest User Account could attach files to articles. The underlying issue is that guest access allowed file attachments to article content, enabling a potential information exposure via user-generated content. The vulnerabil...

CVE-2024-38504

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

PT-2024-4825 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.2.34646 Description: The issue is related to insufficient protection of registration data in the Access Token Handler component. This could allow a remote attacker to gain unauthorized access to...

The vulnerability of the SMTPS protocol implementation in the JetBrains YouTrack project management and task management software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SMTPS protocol implemented by the JetBrains YouTrack software for managing projects and tasks is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-35299

In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation...

CVE-2024-35299

In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation...

CVE-2024-35299

In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation...

CVE-2024-35299

The CVE-2024-35299 entry concerns JetBrains YouTrack prior to version 2024.1.29548, where SMTPS protocol communication lacked proper certificate hostname validation. This creates a potential exposure related to TLS hostname verification, with the NVD CVSS data indicating high impact on confidenti...