1323 matches found
CVE-2020-25209
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...
CVE-2020-25210
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...
CVE-2020-24366
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...
CVE-2020-24366
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...
CVE-2020-25210
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...
Server side request forgery (ssrf)
JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...
Input validation
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues...
Server side request forgery (ssrf)
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...
Improper access control
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...
Information disclosure
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...
Design/Logic Flaw
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...
CVE-2020-27624
JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...
CVE-2020-27624
Vulnerability summary (CVE-2020-27624) : JetBrains YouTrack before version 2020.3.888 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The available connected records confirm the affected product and the vulnerability class, but do not provide detailed root-cause information, ex...
CVE-2020-27625
JetBrains YouTrack (versions prior to 2020.3.888) is affected by an information disclosure vulnerability where notifications could mention inaccessible issues. The available sources confirm the affected product and issue class but do not provide detailed root cause, exploit methodology, affected ...
CVE-2020-27625
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues...
CVE-2020-27626
JetBrains YouTrack before version 2020.3.5333 is affected by an SSRF vulnerability. The connected Red Hat, CNVD, PRION, NVD, and CVE listings consistently describe an SSRF issue in YouTrack prior to 2020.3.5333; no additional exploitation details, affected subcomponents, or specific root-cause mi...
CVE-2020-27626
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...
CVE-2020-25209
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...
CVE-2020-25209
The vulnerability affects JetBrains YouTrack prior to version 2020.3.6638, where improper access control on certain subresources enables information disclosure via the REST API. Root cause: access-control gaps in subresources expose sensitive information to unauthorized callers. Impact: potential...