CVE-2024-28230

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2024.1.25893

Description The issue is related to the lack of authorization procedures in JetBrains YouTrack, allowing an attacker to gain unauthorized access to a project. This is due to the possibility of attaching or detaching a workflow to a project without requiring project admin permissions.

Recommendations For versions prior to 2024.1.25893, update to version 2024.1.25893 or later to resolve the issue. As a temporary workaround, consider restricting access to project workflow management to minimize the risk of exploitation.