A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.
9.8CVSS
9.4AI Score
0.002EPSS
A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852.
8.8CVSS
8.6AI Score
0.001EPSS
An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168.
9.8CVSS
9.3AI Score
0.002EPSS
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
9.8CVSS
9.2AI Score
0.002EPSS
Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
9.8CVSS
9.5AI Score
0.002EPSS
JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.
6.1CVSS
5.9AI Score
0.001EPSS
JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser.
6.1CVSS
5.9AI Score
0.001EPSS
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.
4.3CVSS
4.6AI Score
0.001EPSS
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
8.8CVSS
8.6AI Score
0.001EPSS
JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.
6.1CVSS
6.3AI Score
0.001EPSS
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.
6.1CVSS
5.9AI Score
0.001EPSS
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
5.3CVSS
5.3AI Score
0.001EPSS
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.
2.7CVSS
4.1AI Score
0.001EPSS
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.
7.5CVSS
7.4AI Score
0.001EPSS
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
8.8CVSS
8.8AI Score
0.001EPSS
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.
5.3CVSS
5.3AI Score
0.001EPSS
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.
5.3CVSS
5.2AI Score
0.001EPSS
In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.
5.3CVSS
5.3AI Score
0.001EPSS
In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft.
6.5CVSS
6.4AI Score
0.001EPSS
In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.
7.3CVSS
7.2AI Score
0.001EPSS
JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.
7.5CVSS
7.4AI Score
0.002EPSS
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.
3.3CVSS
4AI Score
0.0004EPSS
In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.
6.5CVSS
6.5AI Score
0.001EPSS
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.
5.3CVSS
5.3AI Score
0.001EPSS
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API.
7.5CVSS
7.2AI Score
0.002EPSS
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants.
5.3CVSS
5.3AI Score
0.001EPSS
5.3CVSS
5.3AI Score
0.001EPSS
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.
5.3CVSS
5.3AI Score
0.001EPSS
5.3CVSS
5.3AI Score
0.001EPSS
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
5.3CVSS
5.3AI Score
0.001EPSS
JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.
6.1CVSS
5.9AI Score
0.001EPSS
8.8CVSS
8.7AI Score
0.001EPSS
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.
5.3CVSS
5.4AI Score
0.001EPSS
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution.
5.3CVSS
5.5AI Score
0.001EPSS
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly.
5.3CVSS
5.4AI Score
0.001EPSS
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments.
7.5CVSS
7.4AI Score
0.001EPSS
In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.
9.8CVSS
9.6AI Score
0.012EPSS
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.
4.3CVSS
4.5AI Score
0.001EPSS
In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.
5.4CVSS
5.2AI Score
0.001EPSS
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
7.5CVSS
7.5AI Score
0.001EPSS
In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
6.1CVSS
6.2AI Score
0.001EPSS
In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
7.5CVSS
7.2AI Score
0.002EPSS
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
9.1CVSS
9.1AI Score
0.002EPSS
7.5CVSS
7.5AI Score
0.001EPSS
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.
5.3CVSS
5.3AI Score
0.001EPSS
5.4CVSS
5.1AI Score
0.001EPSS
7.5CVSS
7.5AI Score
0.002EPSS
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
4.3CVSS
4.6AI Score
0.001EPSS
5.4CVSS
5.2AI Score
0.001EPSS
9.8CVSS
9.6AI Score
0.002EPSS