6722 matches found
JetBrains YouTrack Attachment Operation Permission Check Improperly Vulnerability
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701 due to improper checking of attachment...
JetBrains YouTrack Cross-Site Request Forgery Vulnerability (CNVD-2021-09316)
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site request forgery vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701. An attacke...
CVE-2020-18723
Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...
CVE-2020-18723
Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...
Cross site scripting
Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...
CVE-2021-25768
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...
CVE-2021-25765
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
CVE-2021-25765
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
Cross site request forgery (csrf)
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...
Design/Logic Flaw
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
CVE-2021-25769
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...
CVE-2021-25768
CVE-2021-25768 concerns JetBrains YouTrack prior to 2020.4.4701, where attachment operation permissions were checked improperly. The root cause is an incorrect permissions check on actions related to attachments, enabling potential access control weaknesses in that version range. Public reference...
CVE-2021-25768
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...
CVE-2021-25765
Summary: CVE-2021-25765 affects JetBrains YouTrack prior to 2020.4.4701 and is a CSRF vulnerability via attachment upload. Multiple sources (NVD, Red Hat, CNVD, CVE list, and JetBrains bulletin) corroborate that YouTrack versions before 2020.4.4701 are vulnerable. The issue enables cross-site req...
CVE-2021-25765
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible...
JetBrains YouTrack 安全漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701 due to improper checking of attachment...
Jetbrains JetBrains YouTrack 跨站请求伪造漏洞
YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A cross-site request forgery vulnerability exists in JetBrains YouTrack versions prior to 2020.4.4701. An attacke...