94 matches found
CVE-2026-100258
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
CVE-2026-100258
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
CVE-2026-100258
In JetBrains YouTrack versions prior to 2026.2.18991 , a missing authorization vulnerability allows users with read-only privileges to access and read sensitive project settings . The impact is categorized as a low confidentiality risk (CVSS 3.1 score of 4.3). No specific exploit details or in-th...
EUVD-2026-90002
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
CVE-2026-100258
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
PT-2026-103305
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
CVE-2026-100258: Insertion of Sensitive Information Into Sent Data
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...
BIT-GITLAB-2026-16494 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a proje...
CVE-2026-16494
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a proje...
CVE-2026-16494
GitLab EE fixed CVE-2026-16494, affecting all versions 19.1 before 19.1.4 and 19.2 before 19.2.2. Affected component: project update endpoint; root cause: missing authorization checks allowed an authenticated user to modify project settings normally restricted to higher-privileged roles. Impact: ...
CVE-2026-16494 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a proje...
CVE-2026-16494 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a proje...
GitLab 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-16494)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify proje...
CVE-2026-16494: Missing Authorization
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a proje...
EUVD-2026-39654
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible...
CVE-2026-57923
In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings...
CVE-2026-57922
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible...
CVE-2026-57923
JetBrains YouTrack (before 2026.2.16593) is affected by CVE-2026-57923 due to improper authorization in the app configurations endpoint, which allowed modifying project settings. Root cause: inadequate access checks on the app configurations endpoint. Documented impact: potential unintended chang...