PT-2024-7631
CVE-2024-50581
·
تاريخ النشر
2024-10-28
·
تاريخ التحديث
2024-10-29
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
JetBrains YouTrack versions prior to 2024.3.47707
Description
The issue is related to improper HTML sanitization, which could lead to a cross-site scripting (XSS) attack via a comment tag. This vulnerability is associated with a lack of protection measures for the web page structure, allowing an attacker to conduct cross-site scripting attacks.
Recommendations
For versions prior to 2024.3.47707, update to version 2024.3.47707 or later to resolve the issue. As a temporary workaround, consider restricting user input in comment tags to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾