CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

JetBrains YouTrack 跨站脚本漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrac...

PT-2023-25118 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2023.1.10518 Description: The issue concerns a stored XSS in the Markdown-rendering engine. Recommendations: For versions prior to 2023.1.10518, update to version 2023.1.10518 or later to resolve the issue...

JetBrains YouTrack 资源管理错误漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A resource management error vulnerability exists in versions prior to JetBrains YouTrac...

Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7367 Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-activities-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5490d08d9035fd8fee12c13180f7cdfdc4ddad2ad819f01feaf3e6623e1067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-issues-list-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8148ec3a5e1195eff10d5cb0fe9d0b71bf0456129e7f989ef4d8c8bcfbeae71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7361 Malicious code in youtrack-activities-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5490d08d9035fd8fee12c13180f7cdfdc4ddad2ad819f01feaf3e6623e1067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7364 Malicious code in youtrack-issues-list-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8148ec3a5e1195eff10d5cb0fe9d0b71bf0456129e7f989ef4d8c8bcfbeae71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-board-status-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e36936236b22c94633885c6923c845a98a8d11ba12d2aef38bb4c45524b4df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7362 Malicious code in youtrack-board-status-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e36936236b22c94633885c6923c845a98a8d11ba12d2aef38bb4c45524b4df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-exportable-work-items-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f6a061ddcc82ed6b2d87dfc85057460d0e69c829ef7a659fc7b01dfeb1fe17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7363 Malicious code in youtrack-exportable-work-items-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f6a061ddcc82ed6b2d87dfc85057460d0e69c829ef7a659fc7b01dfeb1fe17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-personal-timetracking-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610a58ca854641cb2f1d0a376d543e2d48ba72931f64d153356eac5c176dd1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7366 Malicious code in youtrack-personal-timetracking-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610a58ca854641cb2f1d0a376d543e2d48ba72931f64d153356eac5c176dd1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7365 Malicious code in youtrack-personal-timetracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a911029c45dc48ac024d7ab8e0aba6080442051a3b80b5dfe65d790cf588c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-personal-timetracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a911029c45dc48ac024d7ab8e0aba6080442051a3b80b5dfe65d790cf588c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-C7P6-X2P3-3WPH Jenkins youtrack-plugin Plugin stored credentials in plain text

Jenkins youtrack-plugin Plugin stored credentials unencrypted in its global configuration file org.jenkinsci.plugins.youtrack.YouTrackProjectProperty.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. youtrack-plugin Plugin...

Jenkins youtrack-plugin Plugin stored credentials in plain text

Jenkins youtrack-plugin Plugin stored credentials unencrypted in its global configuration file org.jenkinsci.plugins.youtrack.YouTrackProjectProperty.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. youtrack-plugin Plugin...