CVE-2024-22370
Description
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible
- CVSS Version 3.1
nvd
CVE ID: CVE-2024-22370
Base Score: 5.4
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Impact Score: 2.7
Exploitability Score: 2.3
jetbrains
CVE ID: CVE-2024-22370
Base Score: 4.6
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Impact Score: 2.5
Exploitability Score: 2.1