1138 matches found
CVE-2025-48391
CVE-2025-48391 affects JetBrains YouTrack before 2025.1.76253. The root cause is missing permission checks in the API, enabling deletion of issues. Connected sources (PT-2025-22284, CNVD-2025-11397, Red Hat CVE, NVD) corroborate the same impact and affected version range. Practical impact is dele...
CVE-2025-48391
In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API...
JetBrains YouTrack 访问控制错误漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. JetBrains YouTrack suffers from an Access Control Error vulnerability that stems from a lack...
JetBrains YouTrack 访问控制错误漏洞
JetBrains YouTrack is a project management tool developed by JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from an Access Control Error vulnerability that stems from the disclosure of restricted attachments during a cloning issue, which can be exploited by...
JetBrains TeamCity 跨站脚本漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. JetBrains TeamCity suffers from a cross-site scripting vulnerability, which originates in the YouTrack integration, that can be exploited by an attacker to inject malicio...
PT-2025-22281 · Jetbrains · Youtrack +1
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.2 Description: The issue allows for stored XSS via YouTrack integration. Recommendations: For versions prior to 2025.03.2, update to version 2025.03.2 or later to resolve the issue...
PT-2025-22279 · Jetbrains · Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.1.74704 Description: The issue concerns restricted attachments becoming visible after issue cloning. Recommendations: For versions prior to 2025.1.74704, update to version 2025.1.74704 or later to...
PT-2025-22284 · Jetbrains · Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.1.76253 Description: The issue is related to missing permission checks in the API, which allowed deletion of issues. Recommendations: For versions prior to 2025.1.76253, update to version 2025.1.76253...
JetBrains YouTrack < 3.1.1 HTTP Request Smuggling
The version of JetBrains YouTrack installed on the remote host is prior to 3.1.1. It is, therefore, affected by a HTTP Request smuggling vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Unknown Vulnerability in JetBrains YouTrack
JetBrains YouTrack is a project management tool developed by the Czech company JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a security vulnerability that stems from account takeover via spoofed emails and Helpdesk integration. No details of the...
JetBrains YouTrack Log Message Disclosure Vulnerability
JetBrains YouTrack is a project management tool developed by JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a log information disclosure vulnerability that stems from the fact that persistent tokens can be exposed in logs. An attacker can exploit this...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
The vulnerability of the JetBrains YouTrack project and task management software interface allows a hacker to obtain the user’s encrypted credentials.
The vulnerability of the JetBrains YouTrack project and task management software interface relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to obtain encrypted user credentials...
The vulnerability of the JetBrains YouTrack software interface allows a hacker to bypass the authentication process and gain full access to any user’s account.
The vulnerability of the JetBrains YouTrack project and task management software interface involves exploiting a security flaw through phising techniques. Exploiting this vulnerability allows attackers to bypass the authentication process and gain full access to any user’s account...
CVE-2022-28650
In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI...
CVE-2024-49579
In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests...
CVE-2024-54154
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox...
JetBrains YouTrack 2024.3.55417 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.55417. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024355417 advisory. - In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...
