1842 matches found
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103488
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CVE-2026-103497
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
CVE-2026-103496
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103496
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103497
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
CVE-2026-103496
In JetBrains YouTrack versions prior to 2026.2.19422 , an Insecure Direct Object Reference (iDOR) vulnerability in the inbox threads component allows an attacker to read notifications belonging to other users. The impact of this vulnerability includes unauthorized access to private notifications....
EUVD-2026-90588
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
EUVD-2026-90587
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103497
The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103494
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a privilege escalation flaw. This vulnerability is triggered through user group membership changes . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available in v...
CVE-2026-103495
Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to a missing authorisation flaw. This security weakness allows for the unauthorized reloading of translation catalogs . The CVSS 3.1 score is 4.3 (Medium) , with a network attack vector and low complexity. Exploitation details an...
CVE-2026-103493
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a stored Cross-Site Scripting (XSS) flaw. The root cause involves the handling of Mermaid and LaTeX content , which allows an attacker to execute malicious scripts in the context of other users' sessions. This vulnerability has a...
CVE-2026-103494
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...
EUVD-2026-90584
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...