CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection SSTI was possible, which could lead to code execution...

CVE-2021-25769

CVE-2021-25769 affects JetBrains YouTrack prior to version 2020.4.6808. The issue is described as an administrator being unable to access attachments, indicating a permissions/access-control flaw related to YouTrack attachments. Public sources confirm the affected product and the fixed version (2...

CVE-2021-25769

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

CVE-2021-25768

CVE-2021-25768 concerns JetBrains YouTrack prior to 2020.4.4701, where attachment operation permissions were checked improperly. The root cause is an incorrect permissions check on actions related to attachments, enabling potential access control weaknesses in that version range. Public reference...

CVE-2021-25768

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

CVE-2021-25767

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...

CVE-2021-25767

Affected product: JetBrains YouTrack (YouTrack). Issue: YouTrack before 2020.6.1767 could disclose an issue’s existence via the YouTrack command execution. Root cause per sources is information disclosure through command execution. Impact: information disclosure (existence, not full content). Rem...

CVE-2021-25766

CVE-2021-25766 affects JetBrains YouTrack prior to version 2020.4.4701, due to improper resource access checks in YouTrack (JT-59397). The issue was addressed in JetBrains’ Security Bulletin Q4 2020, with a fix in 2020.4.4701. The Red Hat/NVD entries corroborate the same description. No exploitat...

CVE-2021-25766

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made...

CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions...

CVE-2020-25208

Summary: CVE-2020-25208 affects YouTrack prior to 2020.4.4701, where an attacker could enumerate users via the REST API without proper permissions. Affected product/component: JetBrains YouTrack (web-based bug tracking/project management tool). Root cause / vulnerability type: Inadequate access c...

CVE-2021-25765

Summary: CVE-2021-25765 affects JetBrains YouTrack prior to 2020.4.4701 and is a CSRF vulnerability via attachment upload. Multiple sources (NVD, Red Hat, CNVD, CVE list, and JetBrains bulletin) corroborate that YouTrack versions before 2020.4.4701 are vulnerable. The issue enables cross-site req...

CVE-2021-25765

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...

Jetbrains JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.4.6808 that stems from an...

JetBrains YouTrack 安全漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701 due to improper checking of attachment...

Jetbrains JetBrains YouTrack 跨站请求伪造漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site request forgery vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701. An attacke...

JetBrains YouTrack 信息泄露漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A project information disclosure vulnerability exists in versions of JetBrains YouTrack prior to 2020.6.1099. No...

Jetbrains JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack that stems from doing improper resourc...

JetBrains YouTrack 代码注入漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A server-side template injection vulnerability exists in JetBrains YouTrack versions prior to 2020.5.3123. An...

Jetbrains JetBrains YouTrack 信息泄露漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...