1138 matches found
JetBrains YouTrack Improper Access Control Vulnerability
JetBrains YouTrack is a project management tool developed by JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from an improper access control vulnerability that stems from allowing project names to be listed without authentication during application import. A...
JetBrains YouTrack 2024.3.51866 Multiple Vulnerabilities (2024_3_51866)
The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.51866. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024351866 advisory. - In JetBrains YouTrack before 2024.3.51866, unauthenticated database backup download was possible via a...
JetBrains YouTrack 2024.3.52635 Multiple Vulnerabilities (2024_3_52635)
The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.52635. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024352635 advisory. - In JetBrains YouTrack before 2024.3.52635, multiple merge functions were vulnerable to prototype pollution...
The vulnerability of the JetBrains YouTrack project management and task management software, related to incorrect data encoding, allows attackers to perform spear-phishing attacks.
The vulnerability of the JetBrains YouTrack project management tool is related to incorrect Punycode data encoding. Exploiting this vulnerability could allow attackers to perform brute-force attacks remotely...
The vulnerability of the Ruby Syntax Detector component of the JetBrains YouTrack project management and task management software allows a hacker to trigger a service failure.
The vulnerability of the Ruby Syntax Detector component of the JetBrains YouTrack project management and task management software is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions...
CVE-2024-54158
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding...
CVE-2024-54156
In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack...
CVE-2024-54154
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox...
CVE-2024-54157
In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector...
CVE-2024-54158
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding...
CVE-2024-54154
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox...
CVE-2024-54157
In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector...
CVE-2024-54155
In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication...
CVE-2024-54156
In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack...
CVE-2024-54155
In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication...
CVE-2024-54153
In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter...
CVE-2024-54153
In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter...
CVE-2024-54158
CVE-2024-54158 is associated with JetBrains YouTrack prior to 2024.3.52635, where a spoofing attack was possible due to missing Punycode encoding. The connected Red Hat, CNVD, CVE lists and Nessus plugin entry corroborate the vulnerability in YouTrack versions before 2024.3.52635. The primary imp...
