1323 matches found
CVE-2021-37553
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
CVE-2021-37551
CVE-2021-37551 affects JetBrains YouTrack prior to 2021.2.16363, where system user passwords were hashed with SHA-256. Public sources (CNVD/Red Hat/NVD) describe an encryption/hash issue that could allow password recovery from the hash. JetBrains’ Q2 2021 Security Bulletin confirms the issue and ...
CVE-2021-37551
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256...
CVE-2021-37552
In JetBrains YouTrack before 2021.2.17925, stored XSS was possible...
CVE-2021-37552
JetBrains YouTrack prior to 2021.2.17925 is affected by a Stored XSS vulnerability (CVE-2021-37552) caused by insufficient validation of client‑side data. The issue could allow execution of malicious scripts in a legitimate user session. This CVE is addressed in YouTrack 2021.2.17925 (per JetBrai...
CVE-2021-37550
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used...
CVE-2021-37550
CVE-2021-37550 concerns JetBrains YouTrack. The vulnerability arises from time-unsafe comparisons in YouTrack prior to version 2021.2.16363 (JT-63697). The issue affects YouTrack and is addressed by the fix in 2021.2.16363, as noted in JetBrains Security Bulletin Q2 2021. The available documents ...
CVE-2021-37549
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient...
CVE-2021-37549
CVE-2021-37549 affects JetBrains YouTrack prior to version 2021.1.11111, where sandboxing in workflows was insufficient, enabling an elevation of privileges issue. The vulnerability is categorized as YouTrack – Insufficient sandboxing in workflows, with the Red Hat and CNVD entries confirming pri...
JetBrains YouTrack 信息泄露漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to an information disclosure vulnerability that stems from improper access restrictions and could be exploited by remote attackers to bypass implement...
JetBrains YouTrack 跨站脚本漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in versions of JetBrains YouTrack prior to 2021.2.17925, which stems from the lack of proper validation of client-side data in the web...
JetBrains YouTrack 加密问题漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to an encryption issue prior to version 2021.2.16363, which stems from the software's use of the SHA-256 algorithm for password hashing. An attacker...
JetBrains YouTrack 安全特征问题漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to a security feature that could be exploited by remote attackers to access sensitive information...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack has an elevation of privilege vulnerability that could be exploited by an attacker to bypass implemented security restrictions and elevate privileges on the system...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack contains a security vulnerability that could be exploited by remote attackers to bypass implemented security restrictions...
JetBrains YouTrack Access Control Improperly Implemented Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. JetBrains YouTrack versions prior to 2020.6.6600 are vulnerable to an improper implementation of access control...
JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2021-34739)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A stored cross-site scripting vulnerability exists in JetBrains YouTrack versions prior to 2020.6.6441. An attack...
JetBrains YouTrack Information Disclosure Vulnerability (CNVD-2021-34743)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. An information disclosure vulnerability exists in the "Issue Preview" of JetBrains YouTrack versions prior to...
JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2021-34740)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrack 2021.1.9819. The vulnerabilit...
