CVE-2023-38068 : In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms

Published 2023-07-12 13:15:10

Updated 2023-07-20 16:19:34

Source JetBrains s.r.o.

View at NVD, CVE.org

Products affected by CVE-2023-38068

Jetbrains » Youtrack
Versions before (<) 2023.1.16597
cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	3.9	3.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L	3.9	2.5	JetBrains s.r.o.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low

CWE-799 Improper Control of Interaction Frequency

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

Assigned by: security@jetbrains.com (Primary)

Jump to