1138 matches found
CVE-2024-50577
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...
CVE-2024-50574
In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...
CVE-2024-50575
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...
CVE-2024-50582
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements...
CVE-2024-50582
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements...
CVE-2024-50582
JetBrains YouTrack before 2024.3.47707 is affected by a stored XSS flaw caused by improper HTML sanitization in markdown elements. This allows injected HTML/JS to persist in pages. Remediation per vendor guidance is to update to 2024.3.47707 or later; exploit details are not provided in the docum...
CVE-2024-50581
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag...
CVE-2024-50580
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule...
CVE-2024-50580
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule...
CVE-2024-50581
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag...
CVE-2024-50581
CVE-2024-50581 affects JetBrains YouTrack before 2024.3.47707. The root cause is improper HTML sanitization, enabling cross-site scripting via a comment tag. Affected software is YouTrack (JetBrains). Impact is XSS under user interaction, as described in the vendor advisory and related security f...
CVE-2024-50580
JetBrains YouTrack is affected in versions before 2024.3.47707 due to insecure markdown parsing and a faulty rendering rule, enabling multiple cross-site scripting (XSS) vectors. The impact is limited to XSS as described in the vendor advisory; remediation is to upgrade to 2024.3.47707 or newer (...
EUVD-2024-44960
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible...
CVE-2024-50579
JetBrains YouTrack is affected: before 2024.3.47707, it allows reflected XSS due to insecure link sanitization. Root cause is improper link cleaning. Impact is user-visible XSS without user interaction in some contexts; vendor advisory notes fix in 2024.3.47707. Remediation: upgrade to YouTrack 2...
CVE-2024-50578
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
CVE-2024-50579
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible...
CVE-2024-50579
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible...
CVE-2024-50578
Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...