CVE-2022-24347: XSS
First published: Fri Feb 25 2022(Updated: )
JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jetbrains Youtrack | <2021.4.36872 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the stored XSS vulnerability in JetBrains YouTrack?
The vulnerability ID for the stored XSS vulnerability in JetBrains YouTrack is CVE-2022-24347.
What is the severity rating of CVE-2022-24347?
The severity rating of CVE-2022-24347 is medium (5.4).
How can the stored XSS vulnerability in JetBrains YouTrack be exploited?
The stored XSS vulnerability in JetBrains YouTrack can be exploited via a project icon.
Which versions of JetBrains YouTrack are affected by CVE-2022-24347?
JetBrains YouTrack versions up to and excluding 2021.4.36872 are affected by CVE-2022-24347.
Is there a fix available for the stored XSS vulnerability in JetBrains YouTrack?
Yes, a fix for the stored XSS vulnerability in JetBrains YouTrack is available in version 2021.4.36872 and later.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- agent/tags
- agent/description
- agent/first-publish-date
- vendor/jetbrains
- canonical/jetbrains youtrack