PT-2023-31696

CVE-2023-50871

·

Published

2023-12-15

·

Updated

2023-12-19

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2023.3.22268
Description The issue concerns a missing authorization check for inline comments inside thread replies. This could potentially allow unauthorized access or actions within the system.
Recommendations For versions prior to 2023.3.22268, update to version 2023.3.22268 or later to resolve the issue. As a temporary workaround, consider restricting access to inline comments inside thread replies until the update is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾