1708 matches found
CVE-2019-18369
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...
CVE-2019-18369: Incorrect Default Permissions
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...
CloudBees Jenkins youtrack-plugin Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . youtrack-plugin Plugin is used in one of the b...
CVE-2019-15040
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page...
CVE-2019-16171
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...
CVE-2019-15040
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page...
CVE-2019-16171
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...
CVE-2019-14956
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names...
CVE-2019-14956
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names...
Design/Logic Flaw
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names...
Cross site scripting
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...
Cross site request forgery (csrf)
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page...
CVE-2019-14956
JetBrains YouTrack before 2019.2.53938 is affected by CVE-2019-14956, where incorrect settings allowed a user without sufficient permissions to obtain names of other projects. Red Hat and CVE trackers confirm the issue and the YouTrack entry on the JetBrains Q2 2019 security bulletin links the CV...
CVE-2019-14956
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names...
CVE-2019-15040
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page...
CVE-2019-15040
JetBrains YouTrack is affected by a Cross-Site Request Forgery (CSRF) vulnerability on the settings page in versions prior to 2019.1. The issue is described consistently across multiple connected sources (Red Hat, CNVD, CNVD, NVD mirror entries) as a CSRF in YouTrack before 2019.1. The CVE entry ...
CVE-2019-16171
CVE-2019-16171 affects JetBrains YouTrack (through 2019.2.56594). Multiple connected sources confirm a Stored XSS on the issue page . The vulnerability is described consistently across Red Hat, CNVD, CNVD-2019-41873, NVD, and related CVE lists. The reports do not provide specific product versions...
CVE-2019-16171
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...
CVE-2019-14956: Improper Preservation of Permissions
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names...