Description
In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2024.3.47197 | 2024.3.47197 |
High · 8.1
CVE-2024-49579
EUVD-2024-43465GHSA-2jrg-m6qw-2x74
In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests
Published Oct 17, 2024 · Updated Oct 17, 2024 · Assigned by JetBrains