Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-50582 EUVD-2024-44963GHSA-65xw-vg7q-v4cg

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements

Published Oct 28, 2024 · Updated Oct 28, 2024 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements

Affected products

VendorProductAffectedFixed
JetBrains YouTrack < 2024.3.47707 2024.3.47707

References