CVE-2024-22370: XSS
Published Jan 9, 2024
·Updated
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible
Affected Software
1 affected component
JetBrains YouTrack<2023.3.22666
Event History
Jan 9, 2024
CVE Published
via MITRE·09:48 AM
Data Sourced
via MITRE·09:48 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22370?
CVE-2024-22370 is rated as a medium severity vulnerability due to its potential for stored XSS attacks.
2
How do I fix CVE-2024-22370?
To fix CVE-2024-22370, upgrade JetBrains YouTrack to version 2023.3.22666 or later.
3
What impact does CVE-2024-22370 have on my system?
CVE-2024-22370 allows an attacker to execute arbitrary JavaScript in the context of another user’s session through stored XSS.
4
Is my version of JetBrains YouTrack vulnerable to CVE-2024-22370?
If you are using JetBrains YouTrack version prior to 2023.3.22666, your system is vulnerable to CVE-2024-22370.
5
How does stored XSS occur in CVE-2024-22370?
Stored XSS in CVE-2024-22370 occurs when user input containing malicious scripts is stored and rendered without proper sanitization in markdown.