CVE-2024-54158

MEDIUM Year: 2024
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-173
View all →

Vulnerability Description

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding

Related Vulnerabilities

CVE-2023-26302

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

CWE-1732023

CVE-2023-26303

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

CWE-1732023

CVE-2023-26302

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.

CWE-1732023

CVE-2023-26303

MEDIUM
CVSS:5.5(Medium)

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

CWE-1732023