1708 matches found
Server side request forgery (ssrf)
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports...
Design/Logic Flaw
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15823
JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component...
CVE-2020-15823
JetBrains YouTrack before 2020.2.8873 contains a Server-Side Request Forgery (SSRF) vulnerability in the Workflow component. Multiple connected sources (Red Hat and CNVD entries, plus JetBrains security bulletin references) corroborate the issue and its affected version range. Remediation observe...
CVE-2020-15821
In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft...
CVE-2020-15821
In YouTrack prior to 2020.2.6881, a user lacking the necessary permissions could create an article draft. This vulnerability (CVE-2020-15821) affects YouTrack versions up to and including 2020.2.6880, with the remediation implemented in 2020.2.6881 as noted in JetBrains’ Q2 2020 security bulletin...
CVE-2020-15820
In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence...
CVE-2020-15820
The CVE-2020-15820 issue affects YouTrack (JetBrains) prior to version 2020.2.6881, where the Markdown parser could disclose the existence of a hidden file. The problem is documented in JetBrains’ Q2 2020 security bulletin, which notes that YouTrack was updated to resolve this vulnerability in 20...
CVE-2020-15819
Summary: CVE-2020-15819 applies to JetBrains YouTrack prior to 2020.2.10643, where an SSRF flaw allowed scanning internal ports. What’s affected: YouTrack (before 2020.2.10643). Root cause/impact (as stated): Server-side request forgery enabling internal port discovery. Remediation: Upgrade to Yo...
CVE-2020-15819
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports...
CVE-2020-15817
CVE-2020-15817 affects JetBrains YouTrack prior to version 2020.1.1331, where an external user could execute commands against arbitrary issues. The issue is high severity; remediation is to upgrade YouTrack to 2020.1.1331 or later (as noted in JetBrains’ Q2 2020 security bulletin). If you need mo...
CVE-2020-15817
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15818
CVE-2020-15818 affects JetBrains YouTrack prior to 2020.2.8527, where the subtasks workflow could disclose the existence of an issue. The issue is documented in multiple sources (NVD/Red Hat/CVE lists) with a fixed version noted in JetBrains’ Q2 2020 Security Bulletin: YouTrack is resolved in 202...
CVE-2020-15818
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...
CVE-2020-15819: Server-Side Request Forgery (SSRF)
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports...
CVE-2020-15817: Undefined Security Weakness
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15821: Incorrect Default Permissions
In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft...
CVE-2020-15818: Undefined Security Weakness
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...