PT-2019-13890

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.2.53938 Description The issue is related to a possible XSS through issue attachments when using the Firefox browser. Recommendations For versions prior to 2019.2.53938, update to version 2019.2.53938 o...

PT-2019-13889

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.1.52584 Description The issue is related to a possible XSS in the issue titles. Recommendations For versions prior to 2019.1.52584, update to version 2019.1.52584 or later to resolve the issue...

CVE-2019-14952: Improper Neutralization of Input During Web Page Generation

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles...

CVE-2019-15041: URL Redirection to Untrusted Site

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere...

CVE-2019-14953: Improper Neutralization of Input During Web Page Generation

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser...

PT-2019-13950

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.1.52545 Description The issue arises from unbounded URL whitelisting due to the inclusion of functionality from an untrusted control sphere. Recommendations For versions prior to 2019.1.52545, update t...

JetBrains YouTrack Privilege Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack. An attacker can exploit the...

JetBrains YouTrack server code execution vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A code execution vulnerability exists in the JetBrains YouTrack server. The vulnerability...

JetBrains YouTrack Confluence Plugin Code Execution Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A code execution vulnerability exists in the JetBrains YouTrack Confluence plugin versions...

JetBrains YouTrack Cross-Site Request Forgery Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site request forgery vulnerability exists in the admin endpoint in JetBrains YouTrac...

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

Server side request forgery (ssrf)

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

CVE-2019-12852

CVE-2019-12852 applies to JetBrains YouTrack server and is an SSRF vulnerability (one of two issues). The Red Hat and NVD entries corroborate that an SSRF could be triggered on YouTrack servers, with remediation implemented in JetBrains YouTrack 2018.4.49168. The JetBrains security bulletin confi...

CVE-2019-10100

In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to...

CVE-2019-12867

Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

CVE-2019-10100

In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to...