CVE-2022-24347

概要

参考情報

• blog.jetbrains.com · Vendor Advisory
• blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 · Vendor Advisory

youtrack のその他の脆弱性

• CVE-2026-103497中 5.5In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration
• CVE-2026-103496中 5.4In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications
• CVE-2026-103495中 4.3In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs
• CVE-2026-103494中 6.6In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes
• CVE-2026-103493高 8.1In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible