1138 matches found
CVE-2024-28229
CVE-2024-28229 affects JetBrains YouTrack prior to 2024.1.25893. The issue arises from insufficient authorization, allowing a user without appropriate permissions to restore issues and articles. Impact is limited to unauthorized restoration capability; no details about exploitation in the wild ar...
CVE-2024-28229
In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...
CVE-2024-28228
JetBrains YouTrack before 2024.1.25893 is affected. The vulnerability arises in the HelpDesk component, allowing a remote attacker to create comments on behalf of an arbitrary user in HelpDesk. This can enable impersonation within issue discussions. Affected product: JetBrains YouTrack; vulnerabl...
JetBrains YouTrack Security Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...
JetBrains YouTrack Security Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...
JetBrains YouTrack Security Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...
PT-2024-2099 · Jetbrains · Jetbrains Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to authentication bypass via spoofing, allowing a remote attacker to create comments on behalf of an arbitrary user. This can be exploited in the HelpDesk...
PT-2024-2107 · Jetbrains · Jetbrains Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to insufficient authorization mechanisms in JetBrains YouTrack, allowing a remote attacker to bypass existing security restrictions. This could enable a user...
CVE-2024-22370
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible...
CVE-2024-22370
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible...
Cross site scripting
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible...
CVE-2024-22370
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible...
CVE-2024-22370
CVE-2024-22370: A stored cross-site scripting (XSS) vulnerability in JetBrains YouTrack versions before 2023.3.22666 via Markdown. The Red Hat, NVD, CVE/CVE List, and related sources reference the same issue. The description specifies a stored XSS via Markdown, affecting YouTrack prior to the 202...
CVE-2024-22370
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible...
JetBrains YouTrack Security Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2023.3.22666, which...
Exploit for Code Injection in Jetbrains Youtrack
CVE-2022-24442: FreeMarker Server-Side Template Injection in J...
CVE-2023-50871
In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...
CVE-2023-50871
In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...