Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

Youtrack Security Vulnerabilities - 2020

cve
cve

CVE-2020-11692

In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.

2.7CVSS

4.1AI Score

0.001EPSS

2020-04-22 02:15 PM
23
cve
cve

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.

7.5CVSS

7.4AI Score

0.001EPSS

2020-04-22 02:15 PM
22
cve
cve

CVE-2020-15817

In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.

8.8CVSS

8.8AI Score

0.001EPSS

2020-08-08 09:15 PM
35
cve
cve

CVE-2020-15818

In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.

5.3CVSS

5.3AI Score

0.001EPSS

2020-08-08 09:15 PM
46
cve
cve

CVE-2020-15819

JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.

5.3CVSS

5.2AI Score

0.001EPSS

2020-08-08 09:15 PM
34
cve
cve

CVE-2020-15820

In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.

5.3CVSS

5.3AI Score

0.001EPSS

2020-08-08 09:15 PM
38
cve
cve

CVE-2020-15821

In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft.

6.5CVSS

6.4AI Score

0.001EPSS

2020-08-08 09:15 PM
40
cve
cve

CVE-2020-15822

In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.

7.3CVSS

7.2AI Score

0.001EPSS

2020-10-19 07:15 PM
27
cve
cve

CVE-2020-15823

JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.

7.5CVSS

7.4AI Score

0.002EPSS

2020-08-08 09:15 PM
46
2
cve
cve

CVE-2020-24366

Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.

3.3CVSS

4AI Score

0.0004EPSS

2020-11-16 03:15 PM
30
cve
cve

CVE-2020-24618

In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.

6.5CVSS

6.5AI Score

0.001EPSS

2020-08-27 08:15 PM
22
cve
cve

CVE-2020-25209

In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API.

7.5CVSS

7.2AI Score

0.002EPSS

2020-11-16 03:15 PM
25
cve
cve

CVE-2020-25210

In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants.

5.3CVSS

5.3AI Score

0.001EPSS

2020-11-16 03:15 PM
36
cve
cve

CVE-2020-27624

JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.

5.3CVSS

5.3AI Score

0.001EPSS

2020-11-16 03:15 PM
35
cve
cve

CVE-2020-27625

In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.

5.3CVSS

5.3AI Score

0.001EPSS

2020-11-16 03:15 PM
20
cve
cve

CVE-2020-27626

JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.

5.3CVSS

5.3AI Score

0.001EPSS

2020-11-16 03:15 PM
30
cve
cve

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.

5.3CVSS

5.3AI Score

0.001EPSS

2020-01-30 06:15 PM
33
cve
cve

CVE-2020-7913

JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.

6.1CVSS

5.9AI Score

0.001EPSS

2020-01-30 06:15 PM
21