1323 matches found
CVE-2021-31903
In JetBrains YouTrack, we have a Cross-Site Scripting vulnerability (CVE-2021-31903) affecting YouTrack versions prior to 2021.1.9819, caused by insufficient sanitization of pull request titles. The issue is documented in the JetBrains Security Bulletin Q1 2021 and is listed in multiple CVE recor...
CVE-2021-27733
JetBrains YouTrack prior to version 2020.6.6441 is affected by a Stored XSS via issue attachments (CVE-2021-27733). The vulnerability impacts YouTrack components handling attachments, enabling an attacker to inject script that could execute in a user’s browser. JetBrains’ security bulletin confir...
CVE-2021-27733
In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...
JetBrains YouTrack 跨站脚本漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrack 2021.1.9819. The vulnerabilit...
JetBrains YouTrack 信息泄露漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. An information disclosure vulnerability exists in the "Issue Preview" of JetBrains YouTrack versions prior to...
JetBrains YouTrack 跨站脚本漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A stored cross-site scripting vulnerability exists in JetBrains YouTrack versions prior to 2020.6.6441. An attack...
JetBrains YouTrack 安全漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. JetBrains YouTrack versions prior to 2020.6.6600 are vulnerable to an improper implementation of access control...
Unspecified Vulnerability in JetBrains YouTrack
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from doing improper resourc...
Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09914)
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...
Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09913)
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.4.6808 that stems from an...
JetBrains YouTrack User Enumeration Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. JetBrains YouTrack suffers from a user enumeration vulnerability that can be exploited by an...
JetBrains YouTrack Server-Side Template Injection Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A server-side template injection vulnerability exists in JetBrains YouTrack versions prior to 2020.5.3123. An...
JetBrains YouTrack Cross-Site Request Forgery Vulnerability (CNVD-2021-09316)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site request forgery vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701. An attacke...
JetBrains YouTrack Attachment Operation Permission Check Improperly Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701 due to improper checking of attachment...
JetBrains YouTrack Project Information Disclosure Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A project information disclosure vulnerability exists in versions of JetBrains YouTrack prior to 2020.6.1099. No...
CVE-2021-25771
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
CVE-2021-25770
In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
