CVE-2021-25771

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

Design/Logic Flaw

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

CVE-2021-25771

JetBrains YouTrack prior to 2020.6.1099 has a project information disclosure vulnerability (CVE-2021-25771) where project metadata could be exposed. The risk is an information disclosure with potential exposure of project details; CVE score in NVD indicates medium severity (CVSS v3.1: AV:N/AC:L/P...

CVE-2021-25771

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

CVE-2021-25770

CVE-2021-25770 affects JetBrains YouTrack. A server-side template injection (SSTI) vulnerability in YouTrack prior to 2020.5.3123 could allow code execution. The JetBrains Security Bulletin (Q4 2020) indicates the issue was fixed in 2020.5.3123 and notes this applies to YouTrack InCloud as well. ...

CVE-2021-25769

CVE-2021-25769 affects JetBrains YouTrack prior to version 2020.4.6808. The issue is described as an administrator being unable to access attachments, indicating a permissions/access-control flaw related to YouTrack attachments. Public sources confirm the affected product and the fixed version (2...

CVE-2021-25769

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

CVE-2021-25768

CVE-2021-25768 concerns JetBrains YouTrack prior to 2020.4.4701, where attachment operation permissions were checked improperly. The root cause is an incorrect permissions check on actions related to attachments, enabling potential access control weaknesses in that version range. Public reference...

CVE-2021-25768

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

CVE-2021-25767

Affected product: JetBrains YouTrack (YouTrack). Issue: YouTrack before 2020.6.1767 could disclose an issue’s existence via the YouTrack command execution. Root cause per sources is information disclosure through command execution. Impact: information disclosure (existence, not full content). Rem...

CVE-2021-25766

CVE-2021-25766 affects JetBrains YouTrack prior to version 2020.4.4701, due to improper resource access checks in YouTrack (JT-59397). The issue was addressed in JetBrains’ Security Bulletin Q4 2020, with a fix in 2020.4.4701. The Red Hat/NVD entries corroborate the same description. No exploitat...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2020-25208

Summary: CVE-2020-25208 affects YouTrack prior to 2020.4.4701, where an attacker could enumerate users via the REST API without proper permissions. Affected product/component: JetBrains YouTrack (web-based bug tracking/project management tool). Root cause / vulnerability type: Inadequate access c...

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

CVE-2021-25765

Summary: CVE-2021-25765 affects JetBrains YouTrack prior to 2020.4.4701 and is a CSRF vulnerability via attachment upload. Multiple sources (NVD, Red Hat, CNVD, CVE list, and JetBrains bulletin) corroborate that YouTrack versions before 2020.4.4701 are vulnerable. The issue enables cross-site req...

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

Jetbrains JetBrains YouTrack 信息泄露漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...