Improper access control

In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...

Server side request forgery (ssrf)

JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...

Server side request forgery (ssrf)

JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...

Design/Logic Flaw

In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...

Input validation

In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues...

CVE-2020-27624

Vulnerability summary (CVE-2020-27624) : JetBrains YouTrack before version 2020.3.888 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The available connected records confirm the affected product and the vulnerability class, but do not provide detailed root-cause information, ex...

CVE-2020-27624

JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF...

CVE-2020-27625

In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues...

CVE-2020-27625

JetBrains YouTrack (versions prior to 2020.3.888) is affected by an information disclosure vulnerability where notifications could mention inaccessible issues. The available sources confirm the affected product and issue class but do not provide detailed root cause, exploit methodology, affected ...

CVE-2020-27626

JetBrains YouTrack before version 2020.3.5333 is affected by an SSRF vulnerability. The connected Red Hat, CNVD, PRION, NVD, and CVE listings consistently describe an SSRF issue in YouTrack prior to 2020.3.5333; no additional exploitation details, affected subcomponents, or specific root-cause mi...

CVE-2020-27626

JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF...

CVE-2020-25209

In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API...

CVE-2020-25209

The vulnerability affects JetBrains YouTrack prior to version 2020.3.6638, where improper access control on certain subresources enables information disclosure via the REST API. Root cause: access-control gaps in subresources expose sensitive information to unauthorized callers. Impact: potential...

CVE-2020-24366

Public details to date are limited; connected documents provide only a high-level disclosure (YouTrack Android backups prior to 2020.2.0). No technical specifics (affected component/version/root cause) are present in the included sources.

CVE-2020-24366

Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups...

CVE-2020-25210

In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants...

CVE-2020-25210

CVE-2020-25210 affects JetBrains YouTrack prior to version 2020.3.7955. The issue allows an attacker to access workflow rules without proper access grants. The available documents consistently describe the vulnerability as an information-disclosure/access control flaw in YouTrack’s workflow rules...

JetBrains YouTrack 代码问题漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2020.3.5333, which...

JetBrains YouTrack 代码问题漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.3.888 that stem...

JetBrains YouTrack 信息泄露漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.3.7955, which c...