CVE-2022-25262

CVE-2022-25262 CVE-2022-25262 の PoC + 脆弱性詳細 | JetBrains Hub シングルクリック SAML レスポンス乗っ取り CVE-2022-25262 要件 使用方法 仕組み 「OAuth2 - SAML」交換のための認可コードプール YouTrack Konnector OAuth2 認可コードの奪取（仕様による） 緩和策 要件 JetBrains Hub GET /get-exploit-li...

JetBrains YouTrack < 2026.2.19197 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19197. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature. CVE-2026-100277 - In JetBrains YouTrack...

JetBrains YouTrack < 2026.2.18991 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18991. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification template...

CVE-2026-103495

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103496

In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103491

In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...

CVE-2026-103489

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...

CVE-2026-103493

In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...

CVE-2026-103494

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103490

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links...

CVE-2026-103488

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

EUVD-2026-90587

In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...

CVE-2026-103496

In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...

CVE-2026-103496

In JetBrains YouTrack versions prior to 2026.2.19422 , an Insecure Direct Object Reference (iDOR) vulnerability in the inbox threads component allows an attacker to read notifications belonging to other users. The impact of this vulnerability includes unauthorized access to private notifications....

EUVD-2026-90588

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103496

In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...