CVE-2024-54157

MEDIUM

JetBrains YouTrack <2024.3.52635 - DoS

Title source: llm
STIX 2.1

Description

In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector

References (1)

Scores

CVSS v3 4.3
EPSS 0.0000
EPSS Percentile 0.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1333
Status published
Products (1)
jetbrains/youtrack < 2024.3.52635
Published Dec 04, 2024
Tracked Since Feb 18, 2026