CVE-2024-28230

In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions...

CVE-2024-28230

Summary of CVE-2024-28230 : JetBrains YouTrack versions prior to 2024.1.25893 allow attaching/detaching a workflow to a project without project admin permissions, enabling possible unauthorized workflow management. Reported by Red Hat and other sources, with CVSS v3.1 base score 6.5 (Medium) / Ne...