CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28230
https://notcve.org/view.php?id=CVE-2024-28230
In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions En JetBrains YouTrack anterior a 2024.1.25893, era posible adjuntar/separar un flujo de trabajo a un proyecto sin permisos de administrador del proyecto. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28229
https://notcve.org/view.php?id=CVE-2024-28229
In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles En JetBrains YouTrack anterior a 2024.1.25893, el usuario sin los permisos adecuados podía restaurar problemas y artículos • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28228
https://notcve.org/view.php?id=CVE-2024-28228
In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible En JetBrains YouTrack antes de 2024.1.25893 era posible crear comentarios en nombre de un usuario arbitrario en HelpDesk • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-290: Authentication Bypass by Spoofing •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28174
https://notcve.org/view.php?id=CVE-2024-28174
In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly En JetBrains TeamCity antes de 2023.11.4, las solicitudes de generación de URL prefirmadas en el complemento S3 Artifact Storage no se autorizaban correctamente • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28173
https://notcve.org/view.php?id=CVE-2024-28173
In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed En JetBrains TeamCity entre 2023.11 y 2023.11.4 se podrían revelar parámetros de compilación personalizados del tipo "contraseña" • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-201: Insertion of Sensitive Information Into Sent Data •