CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

Code injection

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

Design/Logic Flaw

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

Cross site request forgery (csrf)

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

Command injection

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

Design/Logic Flaw

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

CVE-2021-25769

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

CVE-2021-25771

JetBrains YouTrack prior to 2020.6.1099 has a project information disclosure vulnerability (CVE-2021-25771) where project metadata could be exposed. The risk is an information disclosure with potential exposure of project details; CVE score in NVD indicates medium severity (CVSS v3.1: AV:N/AC:L/P...

CVE-2021-25771

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

CVE-2021-25770

CVE-2021-25770 affects JetBrains YouTrack. A server-side template injection (SSTI) vulnerability in YouTrack prior to 2020.5.3123 could allow code execution. The JetBrains Security Bulletin (Q4 2020) indicates the issue was fixed in 2020.5.3123 and notes this applies to YouTrack InCloud as well. ...