CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38505
https://notcve.org/view.php?id=CVE-2024-38505
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site En JetBrains YouTrack antes de 2024.2.34646 se enviaba el token de acceso del usuario al sitio de terceros • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-522: Insufficiently Protected Credentials •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38504
https://notcve.org/view.php?id=CVE-2024-38504
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles En JetBrains YouTrack antes de 2024.2.34646, la cuenta de usuario invitado estaba habilitada para adjuntar archivos a artículos • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2024-35299
https://notcve.org/view.php?id=CVE-2024-35299
In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-295: Improper Certificate Validation •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28230
https://notcve.org/view.php?id=CVE-2024-28230
In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions En JetBrains YouTrack anterior a 2024.1.25893, era posible adjuntar/separar un flujo de trabajo a un proyecto sin permisos de administrador del proyecto. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-862: Missing Authorization •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28229
https://notcve.org/view.php?id=CVE-2024-28229
In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles En JetBrains YouTrack anterior a 2024.1.25893, el usuario sin los permisos adecuados podía restaurar problemas y artículos • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •