CVE-2026-25846

In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...

CVE-2026-25846

CVE-2026-25846 affects JetBrains YouTrack prior to 2025.3.119033, where access tokens could be exposed in Mailbox logs. The provided documents identify the affected product and the exposure risk (confidentiality impact HIGH; overall CVSS 6.5, Network attack vector, Low attack complexity, Privileg...

JetBrains YouTrack 日志信息泄露漏洞

JetBrains YouTrack is a browser-based error tracking and project management software developed by Czech company JetBrains. This software features error tracking, workflow creation, and project progress monitoring. Versions of JetBrains YouTrack prior to 2025.3.119033 contained a log information...

JetBrains YouTrack < 2025.3.119033 Information Disclosure

The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.119033. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs. CVE-2026-25846 Note that Nessus has not...

PT-2026-7104

In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs...

CVE-2021-31903

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

CVE-2020-24366

Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...

CVE-2020-24618

In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access...

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...

CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

CVE-2019-12851

A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852...

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

JetBrains YouTrack < 2025.3.104432 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2025.2.92387. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory. - In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure. CVE-2025-64685 - ...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

EUVD-2025-84340

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...