PublicCVE

CVE-2024-22370

MEDIUM4.6JSON exportCreate alert

Description

In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible

CVSS breakdown

CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Affected products