1718 matches found
CVE-2021-31902: Incorrect Permission Assignment for Critical Resource
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...
Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09914)
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...
Unspecified Vulnerability in JetBrains YouTrack
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from doing improper resourc...
Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09913)
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.4.6808 that stems from an...
JetBrains YouTrack User Enumeration Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. JetBrains YouTrack suffers from a user enumeration vulnerability that can be exploited by an...
JetBrains YouTrack Server-Side Template Injection Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A server-side template injection vulnerability exists in JetBrains YouTrack versions prior to 2020.5.3123. An...
JetBrains YouTrack Attachment Operation Permission Check Improperly Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701 due to improper checking of attachment...
JetBrains YouTrack Cross-Site Request Forgery Vulnerability (CNVD-2021-09316)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site request forgery vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701. An attacke...
JetBrains YouTrack Project Information Disclosure Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A project information disclosure vulnerability exists in versions of JetBrains YouTrack prior to 2020.6.1099. No...
CVE-2021-25770
In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...
CVE-2021-25771
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
CVE-2021-25768
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
CVE-2021-25767
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
CVE-2021-25771
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
CVE-2021-25767
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
CVE-2021-25768
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...