CVE-2025-57731

CVE-2025-57731 affects JetBrains YouTrack prior to version 2025.2.92387, where stored cross-site scripting is possible via Mermaid diagram content. Root cause: unsanitized/unsafe Mermaid diagram content executing in the victim’s browser. Impact: user-visible XSS with potential data exposure or se...

CVE-2025-57731

In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content...

PT-2025-34032 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.2.92387 Description: Stored cross-site scripting XSS was possible through Mermaid diagram content. Recommendations: Update JetBrains YouTrack to version 2025.2.92387 or later...

JetBrains YouTrack 跨站脚本漏洞

JetBrains YouTrack is a project management tool developed by the Czech company JetBrains. JetBrains YouTrack suffers from a cross-site scripting vulnerability that stems from the content of Mermaid charts, no details of the vulnerability are provided at this time...

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions...

The vulnerability of the JetBrains YouTrack project management and task management software, related to errors in the user interface’s information presentation, allows attackers to circumvent existing security restrictions.

The vulnerability of the JetBrains YouTrack project and task management software is related to errors in the user interface’s information presentation. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions...

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions...

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions...

CVE-2025-54527

CVE-2025-54527 affects JetBrains YouTrack. The issue is an improper iframe configuration in the widget sandbox that allows popups to bypass security restrictions. Affects YouTrack versions prior to 2025.2.86935 and includes 2025.2.86935, 2025.2.87167, 2025.3.87341, and 2025.3.87344. The Red Hat/R...

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions...

PT-2025-31117 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.2.86935 JetBrains YouTrack version 2025.2.86935 JetBrains YouTrack versions 2025.2.86935 through 2025.2.87167 JetBrains YouTrack version 2025.3.87341 JetBrains YouTrack versions 2025.3.87341 through...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from an iframe...

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of an authentication process that allows attackers to perform spear-phishing attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks remotely...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...

JetBrains YouTrack < 2024.3.85077 / 2025.x < 2025.1.86199 Email Spoofing

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.85077, 2025.x prior to 2025.1.86199. It is, therefore, affected by an email spoofing vulnerability via the Administrative API. Note that Nessus has not tested for these issues but has instead relied only on the...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...