CVE-2022-28649

Summary: CVE-2022-28649 affects JetBrains YouTrack prior to 2022.1.43563. The issue is an iframe inclusion from a third-party domain in the issue description. What’s affected: YouTrack before version 2022.1.43563. Root cause / vector: Embedding an external iframe in issue descriptions, enabling c...