1718 matches found
CVE-2021-25766
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...
CVE-2021-25766
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...
CVE-2021-25765
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
CVE-2020-25208
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...
CVE-2020-25208
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...
Cross site request forgery (csrf)
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...
CVE-2021-25767
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
CVE-2021-25770
In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...
Code injection
In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...
Design/Logic Flaw
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
Command injection
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
CVE-2021-25771
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
CVE-2021-25771
JetBrains YouTrack prior to 2020.6.1099 has a project information disclosure vulnerability (CVE-2021-25771) where project metadata could be exposed. The risk is an information disclosure with potential exposure of project details; CVE score in NVD indicates medium severity (CVSS v3.1: AV:N/AC:L/P...
