CVE-2024-54158
LOWDescription
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding
CVSS v3.1 Score
3.5
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weakness Type (CWE)
CWE-173
CWE-173
CWE-290
CWE-290
Affected Products
| Vendor | Product |
|---|---|
| jetbrains | youtrack |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-54158? +
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding It has a CVSS v3.1 base score of 3.5 (LOW).
How severe is CVE-2024-54158? +
CVE-2024-54158 has a CVSS v3.1 score of 3.5 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.
What products are affected by CVE-2024-54158? +
CVE-2024-54158 affects products from jetbrains, specifically: youtrack. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-54158? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2024-27198
9.8
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVE-2024-23917
9.8
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
CVE-2024-37051
9.3
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA …
CVE-2026-49368
8.7
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
CVE-2025-57731
8.7
In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content
CVE-2025-64456
8.4
In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation