CVE-2021-27733

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31903

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

CVE-2021-31903

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

Code injection

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

Cross site scripting

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

CVE-2021-31903

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

Cross site scripting

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

CVE-2021-27733

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

Information disclosure

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible...

CVE-2021-31905

CVE-2021-31905 affects JetBrains YouTrack prior to 2020.6.8801, where the vulnerability enables information disclosure through the Issue Preview component. The issue is documented across multiple sources (NVD entry, Red Hat advisory, CNVD/CVE listings, and JetBrains security bulletin). Root cause...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

CVE-2021-31902

Summary of CVE-2021-31902: JetBrains YouTrack versions prior to 2020.6.6600 are affected by improper access control during the exporting of issues. The Red Hat/CNVD entries and the JetBrains Security Bulletin Q1 2021 corroborate that the vulnerability is tied to YouTrack and was addressed by a fi...

CVE-2021-31903

In JetBrains YouTrack, we have a Cross-Site Scripting vulnerability (CVE-2021-31903) affecting YouTrack versions prior to 2021.1.9819, caused by insufficient sanitization of pull request titles. The issue is documented in the JetBrains Security Bulletin Q1 2021 and is listed in multiple CVE recor...

CVE-2021-31903

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS...

CVE-2021-27733

JetBrains YouTrack prior to version 2020.6.6441 is affected by a Stored XSS via issue attachments (CVE-2021-27733). The vulnerability impacts YouTrack components handling attachments, enabling an attacker to inject script that could execute in a user’s browser. JetBrains’ security bulletin confir...

CVE-2021-27733

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

JetBrains YouTrack 安全漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. JetBrains YouTrack versions prior to 2020.6.6600 are vulnerable to an improper implementation of access control...