38194 matches found
CVE-2026-100268
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100262
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...
CVE-2026-100277
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
CVE-2026-100277
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
EUVD-2026-90021
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...
CVE-2026-100277
In JetBrains YouTrack versions prior to 2026.2.19197 , an account takeover is possible due to an incorrect authorization vulnerability. The root cause involves the ability to replay a notification signature . Specific exploit details are not provided in the documentation. Remediation is available...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100275
JetBrains YouTrack versions prior to 2026.2.19197 are vulnerable to stored XSS within the workflow error notification toast. This flaw allows for unauthorized script execution in the context of the user's session. Remediation is available in version 2026.2.19197 and subsequent releases. No specif...
EUVD-2026-90019
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
EUVD-2026-90018
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100274
In JetBrains YouTrack versions prior to 2026.2.19197 , a project Admin can trigger a Denial of Service (DoS) condition. The root cause involves the use of a notification template . The CVSS v3.1 score is 6.5 (MEDIUM) , with a high impact on availability via a network vector requiring low privileg...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
EUVD-2026-90016
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100272
In JetBrains YouTrack versions before 2026.2.19197 , a lack of missing authorisation in the notification template preview feature allows Project Administrators to read restricted issues . The impact is categorized as High for confidentiality. Remediation is available in version 2026.2.19197 or la...