Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-50580 EUVD-2024-44961GHSA-q5cj-8jcp-gxw4

In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule

Published Oct 28, 2024 · Updated Oct 28, 2024 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule

Affected products

VendorProductAffectedFixed
JetBrains YouTrack < 2024.3.47707 2024.3.47707

References