CVE-2021-27733

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

EUVD-2022-29241

Malicious code in bioql PyPI...

CVE-2024-28230

In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions...

CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2021-37550

In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used...

CVE-2021-43186

JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS...

CVE-2021-37554

In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions...

CVE-2020-15821

In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft...

CVE-2020-15822

In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped...

CVE-2020-25210

In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...

CVE-2020-15819

JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

JetBrains YouTrack < 3.1.1 HTTP Request Smuggling

The version of JetBrains YouTrack installed on the remote host is prior to 3.1.1. It is, therefore, affected by a HTTP Request smuggling vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Unspecified Vulnerability in JetBrains YouTrack

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. A security vulnerability exists in...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2021-34739)

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A stored cross-site scripting vulnerability exists in JetBrains YouTrack versions prior to 2020.6.6441. An attack...

JetBrains YouTrack Project Information Disclosure Vulnerability

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A project information disclosure vulnerability exists in versions of JetBrains YouTrack prior to 2020.6.1099. No...