Lucene search
+L

1323 matches found

OSV
OSV
added 2021/02/03 4:15 p.m.13 views

CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

5.3CVSS5.8AI score0.02565EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/03 4:15 p.m.11 views

CVE-2021-25769

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

7.5CVSS7.1AI score0.01766EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/03 4:15 p.m.13 views

CVE-2021-25768

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

5.3CVSS6.1AI score0.01175EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.21 views

CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

5.3CVSS0.02565EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/03 4:15 p.m.13 views

CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

9.8CVSS7.4AI score0.0347EPSS
SaveExploits2References2
OSV
OSV
added 2021/02/03 4:15 p.m.7 views

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

8.8CVSS5.8AI score0.00709EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/03 4:15 p.m.9 views

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

5.3CVSS6.1AI score0.0143EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.27 views

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

8.8CVSS0.00709EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.26 views

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

5.3CVSS0.0143EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/03 4:15 p.m.12 views

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

5.3CVSS6.1AI score0.01355EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.31 views

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

5.3CVSS0.01355EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/03 4:15 p.m.30 views

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

5CVSS5.3AI score0.01355EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/02/03 4:15 p.m.28 views

Cross site request forgery (csrf)

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

6.8CVSS8.7AI score0.00709EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/02/03 4:15 p.m.25 views

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

5CVSS5.4AI score0.0143EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/03 4:15 p.m.7 views

CVE-2021-25769

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

7.5CVSS7.3AI score0.01766EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/02/03 4:15 p.m.7 views

CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

5.3CVSS5.7AI score0.02565EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/02/03 4:15 p.m.5 views

CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

9.8CVSS8.6AI score0.0347EPSS
SaveExploits2References3
Prion
Prion
added 2021/02/03 4:15 p.m.37 views

Code injection

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

7.5CVSS9.6AI score0.0347EPSS
SaveExploits2References2Affected Software1
Prion
Prion
added 2021/02/03 4:15 p.m.22 views

Command injection

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

5CVSS5.5AI score0.02565EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/02/03 4:15 p.m.24 views

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

5CVSS7.5AI score0.01766EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder