JetBrains YouTrack Elevation of Privilege Vulnerability (CNVD-2022-20141)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features error tracking, creating workflows and monitoring project progress.An elevation of privilege vulnerability exists in versions prior to JetBrains YouTrack 2021.4.31698, which stems from an incorrect program call to an advanced native procedure. An attacker could exploit this vulnerability to allow a user with read-only privileges to be able to set a custom logo.