PT-2024-7560

CVE-2024-50574

·

تاريخ النشر

2024-10-28

·

تاريخ التحديث

2024-10-29

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2024.3.47707
Description The issue is related to the Helpdesk function in YouTrack, which uses a regular expression with inefficient computational complexity. This could allow a remote attacker to cause a denial of service by parsing email headers in the Helpdesk functionality. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For versions prior to 2024.3.47707, update to version 2024.3.47707 or later to resolve the issue. As a temporary workaround, consider restricting access to the Helpdesk functionality until a patch is applied.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾