CVE-2022-28649

creationtimestamp| type| source ---|---|--- 2022-04-05 22:29:12+00:00| seen| https://t.me/cibsecurity/40199...

CVE-2022-28649

In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue description...

CVE-2022-28649

Summary: CVE-2022-28649 affects JetBrains YouTrack prior to 2022.1.43563. The issue is an iframe inclusion from a third-party domain in the issue description. What’s affected: YouTrack before version 2022.1.43563. Root cause / vector: Embedding an external iframe in issue descriptions, enabling c...