CVE-2019-15040: Cross-Site Request Forgery (CSRF)

JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page...

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

Design/Logic Flaw

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

CVE-2019-15041

CVE-2019-15041 affects JetBrains YouTrack. YouTrack versions before 2019.1.52545 allow unbounded URL whitelisting due to Inclusion of Functionality from an Untrusted Control Sphere. Public sources (Red Hat, CNVD, CVE listings) confirm the issue and associate the fixed build with YouTrack 2019.1.5...

CVE-2019-14953

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

CVE-2019-14953

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

Cross site scripting

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

CVE-2019-14953

CVE-2019-14953 affects JetBrains YouTrack versions before 2019.2.53938. The issue is a stored XSS via issue attachments when using Firefox, attributed to insufficient validation of client data in the web application. Impact is client-side code execution in affected YouTrack deployments. The fix i...

CVE-2019-14953

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

CVE-2019-14952

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

CVE-2019-14952

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

Cross site scripting

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

CVE-2019-14952

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

CVE-2019-14952

JetBrains YouTrack (browser-based bug tracking) versions before 2019.1.52584 contain a Cross-Site Scripting (XSS) vulnerability in issue titles due to insufficient validation of client data. Impact: allows executing client-side code. Remediation: upgrade to YouTrack 2019.1.52584 or later (as indi...

CVE-2019-14953: Improper Neutralization of Input During Web Page Generation

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

CVE-2019-15041: URL Redirection to Untrusted Site

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

CVE-2019-14952: Improper Neutralization of Input During Web Page Generation

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

JetBrains YouTrack Privilege Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack. An attacker can exploit the...