CVE-2022-24343: jetbrains youtrack – CVSS 4.3 · Watchpost

← All vulnerabilities

CVE-2022-24343

中危 4.3CVE-2022-24343 · Published 25/02/2022 · updated 17/06/2026

要点

CVE-2022-24343 是影响 youtrack (jetbrains) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.63%，高于 50.3% 的漏洞。
修复：升级到 2021.4.31698 或更高版本。

Package	Affected versions	Patched versions
youtrack jetbrains	`< 2021.4.31698`	`2021.4.31698`

Description

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.

References

blog.jetbrains.com · Vendor Advisory
blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 · Vendor Advisory

youtrack 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free