Page 3 of 92 results (0.008 seconds)

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-47160

https://notcve.org/view.php?id=CVE-2024-47160

19 Sep 2024 — In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-47159

https://notcve.org/view.php?id=CVE-2024-47159

19 Sep 2024 — In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •

CVSS: 8.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-38506

https://notcve.org/view.php?id=CVE-2024-38506

18 Jun 2024 — In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows En JetBrains YouTrack anterior a 2024.2.34646, el usuario sin los permisos adecuados podía habilitar la opción de conexión automática para flujos de trabajo • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-38505

https://notcve.org/view.php?id=CVE-2024-38505

18 Jun 2024 — In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site En JetBrains YouTrack antes de 2024.2.34646 se enviaba el token de acceso del usuario al sitio de terceros • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-522: Insufficiently Protected Credentials •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-38504

https://notcve.org/view.php?id=CVE-2024-38504

18 Jun 2024 — In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles En JetBrains YouTrack antes de 2024.2.34646, la cuenta de usuario invitado estaba habilitada para adjuntar archivos a artículos • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-35299

https://notcve.org/view.php?id=CVE-2024-35299

16 May 2024 — In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-295: Improper Certificate Validation •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-28230

https://notcve.org/view.php?id=CVE-2024-28230

07 Mar 2024 — In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions En JetBrains YouTrack anterior a 2024.1.25893, era posible adjuntar/separar un flujo de trabajo a un proyecto sin permisos de administrador del proyecto. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-28229

https://notcve.org/view.php?id=CVE-2024-28229

07 Mar 2024 — In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles En JetBrains YouTrack anterior a 2024.1.25893, el usuario sin los permisos adecuados podía restaurar problemas y artículos • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-28228

https://notcve.org/view.php?id=CVE-2024-28228

07 Mar 2024 — In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible En JetBrains YouTrack antes de 2024.1.25893 era posible crear comentarios en nombre de un usuario arbitrario en HelpDesk • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-290: Authentication Bypass by Spoofing •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-22370

https://notcve.org/view.php?id=CVE-2024-22370

09 Jan 2024 — In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible En JetBrains YouTrack antes de 2023.3.22666 era posible el XSS almacenado mediante markdown • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •