CVE-2024-48902

In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@jetbrains.com

Published

2024-10-10

Last modified

2024-10-10

Weaknesses

CWE-862

Affected products

• Youtrack (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/