CVE-2025-24458

Summary

In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration

Affected Software

VendorProductVersion RangeStatus
JetBrainsYouTrack0 < 2024.3.55417affected

Weaknesses

  • CWE-290: CWE-290

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References