Design/Logic Flaw

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

Design/Logic Flaw

JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description...

CVE-2020-7913

Summary: CVE-2020-7913 affects JetBrains YouTrack 2019.2 and earlier, vulnerable to cross-site scripting via an issue description. The Red Hat, CNVD, NVD entries and JetBrains bulletin confirm the issue. Affected product/version: YouTrack 2019.2 and earlier, before 2019.2.59309. Impact: XSS in we...

CVE-2020-7913

JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description...

CVE-2020-7912

CVE-2020-7912 affects JetBrains YouTrack prior to version 2019.2.59309. The issue allows access to SMTP/Jabber settings via backups, indicating the backups stored configuration data that should have been protected. The Red Hat and NVD entries corroborate the same description. The JetBrains securi...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

CVE-2020-7913: Improper Neutralization of Input During Web Page Generation

JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description...

CVE-2020-7912: Exposure of Resource to Wrong Sphere

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

JetBrains Security Bulletin Q4 2019

FYI Security JetBrains Security Bulletin Q4 2019 Robert Demmer In the fourth quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

Unspecified Vulnerability in JetBrains YouTrack

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. An unspecified vulnerability exists in JetBrains YouTrack. An attacker could exploit this...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2019-41873)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack. An attacker can exploit...

JetBrains YouTrack Cross-Site Request Forgery Vulnerability (CNVD-2019-41872)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site request forgery vulnerability exists in JetBrains YouTrack. An attacker could u...

JetBrains YouTrack Input Validation Error Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. An input validation error vulnerability exists in JetBrains YouTrack. An attacker could...

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrack...

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrack...

JetBrains YouTrack Label Removal Vulnerability

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A label removal vulnerability exists in versions prior to JetBrains YouTrack 2019.2.55152. An attacker could use...

CVE-2019-18369

In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...

CVE-2019-18369

In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...

Design/Logic Flaw

In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...

CVE-2019-18369

JetBrains YouTrack contains a vulnerability (CVE-2019-18369) where removing tags from the issues list could be performed without the required permission. Affected product: YouTrack (JetBrains). Root cause: tag removal action could be executed without matching permissions, enabling unauthorized ta...