CVE-2020-15818

In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...

Design/Logic Flaw

In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...

Design/Logic Flaw

JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component...

CVE-2020-15823

JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component...

CVE-2020-15823

JetBrains YouTrack before 2020.2.8873 contains a Server-Side Request Forgery (SSRF) vulnerability in the Workflow component. Multiple connected sources (Red Hat and CNVD entries, plus JetBrains security bulletin references) corroborate the issue and its affected version range. Remediation observe...

CVE-2020-15818

In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...

CVE-2020-15818

CVE-2020-15818 affects JetBrains YouTrack prior to 2020.2.8527, where the subtasks workflow could disclose the existence of an issue. The issue is documented in multiple sources (NVD/Red Hat/CVE lists) with a fixed version noted in JetBrains’ Q2 2020 Security Bulletin: YouTrack is resolved in 202...

PT-2020-14647

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.2.8527 Description The issue in JetBrains YouTrack could disclose the existence of issues through the subtasks workflow. Recommendations For versions prior to 2020.2.8527, update to version 2020.2.8527...

PT-2020-14652

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.2.8873 Description The issue concerns a Server-Side Request Forgery SSRF in the Workflow component. Recommendations For versions prior to 2020.2.8873, update to version 2020.2.8873 or later to resolve...

CVE-2020-15823: Server-Side Request Forgery (SSRF)

JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component...

CVE-2020-15818: Undefined Security Weakness

In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence...

Security Bulletin: Multiple vulnerabilities affects IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

PT-2020-21905

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, as indicated ...

GHSA-8M73-W2R2-6XXJ Insecure defaults in UmbracoForms

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

Insecure defaults in UmbracoForms

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

CVE-2020-7685

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

Default configuration

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

CVE-2020-7685 Insecure Defaults

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

CVE-2020-7685

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that...

PT-2020-19708 · Umbraco · Umbraco Forms

Name of the Vulnerable Software and Affected Versions: UmbracoForms versions all versions Description: The issue allows uploading arbitrary file types when using the default configuration for upload forms. Users can mitigate this by creating a custom workflow and frontend validation to block...