PT-2024-7560

CVE-2024-50574

·

Published

2024-10-28

·

Updated

2024-10-29

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2024.3.47707
Description The issue is related to the Helpdesk function in YouTrack, which uses a regular expression with inefficient computational complexity. This could allow a remote attacker to cause a denial of service by parsing email headers in the Helpdesk functionality. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For versions prior to 2024.3.47707, update to version 2024.3.47707 or later to resolve the issue. As a temporary workaround, consider restricting access to the Helpdesk functionality until a patch is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾