JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2022-09231)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in versions of JetBrains YouTrack prior to 2021.2.17925, which stems from the lack of proper validation of client-side data in the web application and could be exploited to trick users into clicking on a connection containing a malicious request to execute code on the client side Steal user cookie credentials.