Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-54156 EUVD-2024-52320GHSA-4vgc-rwr6-7j6r

In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack

Published Dec 4, 2024 · Updated Dec 4, 2024 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack

Affected products

VendorProductAffectedFixed
JetBrains YouTrack < 2024.3.52635 2024.3.52635

References