CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

Cross site scripting

JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page...

Design/Logic Flaw

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

Cross site scripting

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2022-24347

CVE-2022-24347 affects JetBrains YouTrack prior to version 2021.4.36872 and is a stored cross-site scripting (XSS) vulnerability via the application project icon. The root cause is insufficient validation/filtering of user-supplied data and output in the project icon rendering, enabling an attack...

CVE-2022-24344

JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page...

CVE-2022-24344

JetBrains YouTrack before 2021.4.31698 is affected by a stored XSS vulnerability on the Notification templates page. The underlying issue is insufficient validation/filtering of user-supplied data before output. A fix is available in 2021.4.31698 per JetBrains’ bulletin and CNVD/NVD entries corro...

CVE-2022-24343

JetBrains YouTrack (before 2021.4.31698) contains an elevation-of-privilege issue where a user with read-only permissions could set a custom logo. This vulnerability is documented across multiple sources (NVD/Red Hat/CNVD) and is resolved in YouTrack 2021.4.31698, per JetBrains’ security bulletin...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

PT-2022-16700 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2021.4.40426 Description: The issue concerns Server-Side Template Injection SSTI via FreeMarker templates. This allows for potential exploitation. No information is provided about the estimated number of...

JetBrains YouTrack 跨站脚本漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in previous versions of JetBrains YouTrack 2021.4.36872, which stems from the lack of data validation filtering of user-supplied data and...

JetBrains YouTrack 跨站脚本漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in versions prior to JetBrains YouTrack 2021.4.31698, which stems from a lack of data validation filtering of user-supplied data and output...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features error tracking, creating workflows and monitoring project progress.An elevation of privilege vulnerability exists in versions prior to JetBrains YouTrack...

JetBrains YouTrack 代码注入漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to server-side template injection, which can be exploited by attackers to perform SSTI server-side template injection attacks...

JetBrains YouTrack Injection Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack is vulnerable to an injection vulnerability that stems from...

JetBrains YouTrack Cross-Site Scripting Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2021-91660)

JetBrains YouTrack, a browser-based bug tracking and project management software from JetBrains Czech Republic, is vulnerable to a cross-site scripting vulnerability in versions prior to JetBrains YouTrack 2021.3.24402. The vulnerability stems from the lack of proper validation of client-side dat...