1137 matches found
CVE-2021-43184
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible...
CVE-2021-43185
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection...
CVE-2021-43184
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible...
Code injection
JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43186
JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS...
Input validation
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...
CVE-2021-43184
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible...
Cross site scripting
JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS...
Design/Logic Flaw
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection...
Code injection
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
Design/Logic Flaw
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...
CVE-2021-43187
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
CVE-2021-43188
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...
Code injection
In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...
CVE-2021-43191
JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS...
Information disclosure
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
Cross site scripting
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible...
CVE-2021-43187
CVE-2021-43187 affects YouTrack Mobile (JetBrains). In YouTrack Mobile before 2021.2, the iOS client-side cache could contain sensitive information, enabling information disclosure. The issue is documented across multiple sources (NVD entry and Red Hat/CNVD mirrors) with this vulnerability class....
