Description
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2024.3.51866 | 2024.3.51866 |
High · 8.0
CVE-2024-54154
EUVD-2024-52318GHSA-3j57-8hvg-f4cv
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox
Published Dec 4, 2024 · Updated Dec 4, 2024 · Assigned by JetBrains