Lucene search

[email protected]CVE-2019-16171

HistoryOct 02, 2019 - 7:15 p.m.

CVE-2019-16171

2019-10-0219:15:15

CWE-79

[email protected]

web.nvd.nist.gov

jetbrains

youtrack

2019

xss

stored xss

issue page

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.

Affected configurations

NVD

Node

jetbrainsyoutrackRange≤2019.2.56594

CPENameOperatorVersion
jetbrains:youtrackjetbrains youtrackle2019.2.56594

CPE	Name	Operator	Version
jetbrains:youtrack	jetbrains youtrack	le	2019.2.56594

References

blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for CVE-2019-16171

nvd1 prion1 cvelist1 jetbrains1