1708 matches found
JetBrains YouTrack Denial of Service Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.1.659. An...
JetBrains YouTrack Access Control Error Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. An Access Control Error vulnerability exists in JetBrains YouTrack versions prior to 2020.1.659. An attacker coul...
CVE-2020-11693
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...
CVE-2020-11693
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...
CVE-2020-11692
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators...
CVE-2020-11692
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators...
Design/Logic Flaw
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators...
Design/Logic Flaw
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...
CVE-2020-11693
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...
CVE-2020-11693
CVE-2020-11693 affects JetBrains YouTrack prior to 2020.1.659. The vulnerability allows denial of service when a malformed TIFF file is attached to an issue. The issue is documented in NVD/NVD-style records and JetBrains’ Security Bulletin Q1 2020; remediation is to upgrade YouTrack to version 20...
CVE-2020-11692
CVE-2020-11692 affects JetBrains YouTrack prior to version 2020.1.659, where the DB export was accessible to read‑only administrators due to an access control error. The issue is addressed in YouTrack 2020.1.659 (per JetBrains’ security bulletin), with remediation by upgrading to that version or ...
CVE-2020-11692
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators...
CVE-2020-11693: Undefined Security Weakness
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...
JetBrains Security Bulletin Q1 2020
FYI News Security JetBrains Security Bulletin Q1 2020 Robert Demmer In the first quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...
CVE-2020-11692: Incorrect Default Permissions
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators...
JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2020-04345)
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack. The vulnerability stems...
CVE-2020-7913
JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description...
CVE-2020-7912
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...