1710 matches found
Server side request forgery (ssrf)
JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...
Server side request forgery (ssrf)
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...
Information disclosure
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...
Improper access control
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...
Design/Logic Flaw
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...
CVE-2020-27624
JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...
CVE-2020-27624
Vulnerability summary (CVE-2020-27624) : JetBrains YouTrack before version 2020.3.888 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The available connected records confirm the affected product and the vulnerability class, but do not provide detailed root-cause information, ex...
CVE-2020-27625
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues...
CVE-2020-27625
JetBrains YouTrack (versions prior to 2020.3.888) is affected by an information disclosure vulnerability where notifications could mention inaccessible issues. The available sources confirm the affected product and issue class but do not provide detailed root cause, exploit methodology, affected ...
CVE-2020-27626
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...
CVE-2020-27626
JetBrains YouTrack before version 2020.3.5333 is affected by an SSRF vulnerability. The connected Red Hat, CNVD, PRION, NVD, and CVE listings consistently describe an SSRF issue in YouTrack prior to 2020.3.5333; no additional exploitation details, affected subcomponents, or specific root-cause mi...
CVE-2020-25209
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...
CVE-2020-25209
The vulnerability affects JetBrains YouTrack prior to version 2020.3.6638, where improper access control on certain subresources enables information disclosure via the REST API. Root cause: access-control gaps in subresources expose sensitive information to unauthorized callers. Impact: potential...
CVE-2020-24366
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...
CVE-2020-24366
Public details to date are limited; connected documents provide only a high-level disclosure (YouTrack Android backups prior to 2020.2.0). No technical specifics (affected component/version/root cause) are present in the included sources.
CVE-2020-25210
CVE-2020-25210 affects JetBrains YouTrack prior to version 2020.3.7955. The issue allows an attacker to access workflow rules without proper access grants. The available documents consistently describe the vulnerability as an information-disclosure/access control flaw in YouTrack’s workflow rules...
CVE-2020-25210
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...
JetBrains YouTrack 代码问题漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2020.3.5333, which...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.3.888, which...
