Description
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2024.3.46677 | 2024.3.46677 |
Medium · 5.4
CVE-2024-48902
EUVD-2024-43128GHSA-c783-vxv2-vfw8
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via A…
Published Oct 10, 2024 · Updated Oct 10, 2024 · Assigned by JetBrains