1944 matches found
CVE-2022-25262
CVE-2022-25262 PoC + vulnerability details for CVE-2022-25262 | JetBrains Hub single-click SAML response takeover CVE-2022-25262 Requirements Usage How does it work? Authorization code pool for "OAuth2 - SAML" exchange YouTrack Konnector OAuth2 authorization code takeover by design Mitigation...
CVE-2026-75045-PoC
CVE-2026-75045 — JetBrains YouTrack: Unauthenticated Database Backup Download via Shared Draft Signature Status: PoC reconstructed as part of vulnerability research; no public exploit existed at the time. Original reporter: Hieu Nguyen reported to JetBrains, patched 2026-08-17/18. | ---|---...
JetBrains YouTrack < 2025.3.169041 / 2026.1.x < 2026.1.14137 / 2026.2.x < 2026.2.19562 Missing Authorization (CVE-2026-123335)
The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.169041, or 2026.1.x prior to 2026.1.14137, or 2026.2.x prior to 2026.2.19562. It is, therefore, affected by a missing authorization vulnerability: - In JetBrains YouTrack before 2026.2.19562, 2026.1.14137,...
JetBrains YouTrack < 2026.2.19562 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19562. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions. CVE-2026-123327 ...
JetBrains YouTrack < 2026.2.19728 Attachment Size Limit Bypass (CVE-2026-123336)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19728. It is, therefore, affected by an attachment size limit bypass vulnerability: - In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...
JetBrains YouTrack < 2025.3.170763 / 2026.1.x < 2026.1.14150 / 2026.2.x < 2026.2.19656 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.170763, or 2026.1.x prior to 2026.1.14150, or 2026.2.x prior to 2026.2.19656. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusio...
JetBrains YouTrack < 2026.2.19422 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19422. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible. CVE-2026-103493 - In JetBrains YouTrack before...
JetBrains YouTrack < 2026.2.19656 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19656. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab. CVE-2026-123328 - In JetBrains YouTrack...
CVE-2026-86478-PoC
CVE-2026-86478 — JetBrains YouTrack Helpdesk: Account Takeover via Self-Asserted Email Status: PoC reconstructed as part of vulnerability research; no public exploit existed at the time. | ---|--- Product| JetBrains YouTrack self-hosted, Helpdesk component Affected| All builds before 2025.3.16125...
CVE-2022-48429_poc
CVE-2022-48429 - YouTrack Stored XSS The reported description of the CVE on the NVD database lacks accuracy. This is a more accurated description: Youtrack version = 2022.3.65373 has a stored Cross-Site Scripting XSS in dashboards. A malicious low-privileged user can create and share a malformed...
CVE-2022-24442
CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack By inserting malicious content in the Notification FTL files, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE...
CVE-2026-123850
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives...
CVE-2026-123850
In JetBrains YouTrack versions prior to 2026.2.19422 , a cSS injection vulnerability exists within Mermaid diagrams . This issue is triggered via configuration directives , leading to potential integrity impacts as the rendered UI layer can be manipulated. No specific exploits or in-the-wild expl...
CVE-2026-123850
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives...
EUVD-2026-118353
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives...
CVE-2026-123336
In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...
CVE-2026-123337
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility...
CVE-2026-123329
In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions...