CVE-2024-28229: 
YouTrack vulnerability analysis and mitigation

In JetBrains YouTrack before version 2024.1.25893, a vulnerability was identified where users without appropriate permissions could restore issues and articles. The vulnerability was assigned CVE-2024-28229 and was disclosed on March 7, 2024. This security issue affects JetBrains YouTrack installations prior to the patched version (NVD).

The vulnerability is classified as CWE-863 (Incorrect Authorization) with a CVSS v3.1 base score of 6.5 (Medium). The attack vector is network-based (AV:N), with low attack complexity (AC:L), requiring low privileges (PR:L), no user interaction (UI:N), affecting only the local scope (S:U), with no impact on confidentiality (C:N), high impact on integrity (I:H), and no impact on availability (A:N) (NVD).

The vulnerability allows unauthorized users to restore issues and articles in YouTrack, potentially leading to unauthorized access to previously deleted content and compromising the integrity of the system's data management (NVD).

The vulnerability requires network access and low-level privileges to exploit. The attack complexity is considered low, making it relatively straightforward to exploit for attackers who meet the basic requirements (NVD).

The vulnerability has been fixed in JetBrains YouTrack version 2024.1.25893. Users are advised to upgrade to this version or later to mitigate the security risk (JetBrains Advisory).