1323 matches found
CVE-2021-25770
In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...
CVE-2021-25767
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
CVE-2021-43191
JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS...
CVE-2021-37549
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient...
CVE-2021-31905
In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...
CVE-2021-43188
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...
CVE-2021-37550
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used...
CVE-2021-25771
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...
CVE-2021-25766
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...
CVE-2021-25765
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
CVE-2021-43186
JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS...
CVE-2021-43187
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
CVE-2021-43185
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43189
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...
CVE-2021-43192
In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...
CVE-2021-37551
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256...
CVE-2021-37554
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions...