Youtrack Security Vulnerabilities and Issues — Youtrack CVE List

Lucene search

JetbrainsYoutrack

7 matches found

CVE•added 2019/10/01 8:15 p.m.•93 views

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.

6.1CVSS6.3AI score0.00003EPSS

CVE•added 2019/10/01 4:15 p.m.•73 views

CVE-2019-14953

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser.

6.1CVSS5.9AI score0.00007EPSS

CVE•added 2019/10/01 2:15 p.m.•42 views

CVE-2019-14952

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.

6.1CVSS5.9AI score0.00006EPSS

CVE•added 2019/10/02 7:15 p.m.•40 views

CVE-2019-14956

JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.

4.3CVSS4.6AI score0.00002EPSS

CVE•added 2019/10/02 7:15 p.m.•39 views

CVE-2019-15040

JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.

8.8CVSS8.6AI score0.00002EPSS

CVE•added 2019/10/31 4:15 p.m.•37 views

CVE-2019-18369

In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.

5.3CVSS5.3AI score0.00003EPSS

CVE•added 2019/10/02 7:15 p.m.•33 views

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.

6.1CVSS5.9AI score0.00006EPSS