JetBrains YouTrack < 2024.3.85077 / 2025.x < 2025.1.86199 Email Spoofing

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(242245);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/21");

  script_cve_id("CVE-2025-53959");
  script_xref(name:"IAVA", value:"2025-A-0526-S");

  script_name(english:"JetBrains YouTrack < 2024.3.85077 / 2025.x < 2025.1.86199 Email Spoofing");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.85077, 2025.x prior to 2025.1.86199. 
It is, therefore, affected by an email spoofing vulnerability via the Administrative API.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.jetbrains.com/privacy-security/issues-fixed/");
  script_set_attribute(attribute:"solution", value:
"Upgrade to JetBrains YouTrack version 2024.3.85077, 2025.1.86199, 2025.2.86069, or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-53959");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/07/07");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/17");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:jetbrains:youtrack");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("jetbrains_youtrack_win_installed.nbin", "jetbrains_youtrack_nix_installed.nbin");
  script_require_keys("installed_sw/JetBrains YouTrack");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'JetBrains YouTrack');

var constraints = [
  {'fixed_version' : '2024.3.85077'},
  {'min_version' : '2025.0.0', 'fixed_version' : '2025.1.86199', 'fixed_display' : '2025.1.86199 / 2025.2.86069'} 
  # 2025.2.86069 was the first build of 2025, and therefore no 2025 versions are affected.
];

vcf::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE
);