CVE-2024-48902

—

CVSS 3.1

5.4 medium

EPSS

<1%p31

Published

Oct 10, 2024 (Oct 10, 2024)

Modified

Jun 17, 2026

Description

In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API

Vendors: jetbrains
Products: youtrack
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.