Youtrack Security Vulnerabilities and Issues — Youtrack CVE List

Lucene search

JetbrainsYoutrack

12 matches found

CVE•added 2019/07/03 8:15 p.m.•233 views

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168.

9.8CVSS9.3AI score0.00004EPSS

CVE•added 2019/07/03 7:15 p.m.•218 views

CVE-2019-12851

A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852.

8.8CVSS8.6AI score0.00002EPSS

CVE•added 2019/07/03 7:15 p.m.•162 views

CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.

9.8CVSS9.2AI score0.00004EPSS

CVE•added 2019/10/01 8:15 p.m.•92 views

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.

6.1CVSS6.3AI score0.00003EPSS

CVE•added 2019/07/03 7:15 p.m.•80 views

CVE-2019-12867

Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168.

9.8CVSS9.5AI score0.00005EPSS

CVE•added 2019/07/03 7:15 p.m.•76 views

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.

9.8CVSS9.4AI score0.00006EPSS

CVE•added 2019/10/01 4:15 p.m.•73 views

CVE-2019-14953

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser.

6.1CVSS5.9AI score0.00007EPSS

CVE•added 2019/10/01 2:15 p.m.•42 views

CVE-2019-14952

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.

6.1CVSS5.9AI score0.00006EPSS

CVE•added 2019/10/02 7:15 p.m.•40 views

CVE-2019-14956

JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.

4.3CVSS4.6AI score0.00002EPSS

CVE•added 2019/10/02 7:15 p.m.•39 views

CVE-2019-15040

JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.

8.8CVSS8.6AI score0.00002EPSS

CVE•added 2019/10/31 4:15 p.m.•37 views

CVE-2019-18369

In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.

5.3CVSS5.3AI score0.00003EPSS

CVE•added 2019/10/02 7:15 p.m.•33 views

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.

6.1CVSS5.9AI score0.00006EPSS