24 matches found
CVE-2026-86174
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. Authenticated attackers can post comments to arbitrary issues across workspaces by supplying an issueid parameter to the public deploy-board comment endpoint...
EUVD-2014-9210
Malware in sbrugna...
CVE-2020-15817
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15817
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
Design/Logic Flaw
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15817
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
CVE-2020-15817: Undefined Security Weakness
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...
PT-2020-14646
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.1.1331 Description The issue allows an external user to execute commands against arbitrary issues. Recommendations For versions prior to 2020.1.1331, update to version 2020.1.1331 or later to resolve t...
CVE-2019-15003
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view...
CVE-2019-15003
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view...
Authorization
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view...
CVE-2019-15004: Improper Limitation of a Pathname to a Restricted Directory
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view...
CVE-2019-15003: Improper Limitation of a Pathname to a Restricted Directory
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view...
PT-2019-13929
Name of the Vulnerable Software and Affected Versions Atlassian Jira Service Desk Server versions prior to 3.9.17 Atlassian Jira Service Desk Server versions 3.10.0 through 3.16.10 Atlassian Jira Service Desk Server versions 4.0.0 through 4.2.6 Atlassian Jira Service Desk Server versions 4.3.0...
CVE-2019-14994
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and...
CVE-2019-14994
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and...
CVE-2019-14994: Improper Limitation of a Pathname to a Restricted Directory
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and...
PT-2019-13920
Name of the Vulnerable Software and Affected Versions Atlassian Jira Service Desk Server and Jira Service Desk Data Center versions 3.9.15 and earlier Atlassian Jira Service Desk Server and Jira Service Desk Data Center versions 3.10.0 through 3.16.7 Atlassian Jira Service Desk Server and Jira...
