CVE-2025-24458CWE-290

In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration

High · published January 21, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2025-01-21T17:23Z
EPSS history
Timeline
  • 21 JAN 17:23Z
    In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration
    cvelistv5