CVE-2019-15040: CSRF
Published Oct 2, 2019
·Updated
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
Affected Software
1 affected component
JetBrains YouTrack<2019.1
Event History
Oct 2, 2019
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15040?
CVE-2019-15040 is classified as a medium severity vulnerability due to its CSRF nature, which could lead to unauthorized changes in user settings.
2
How do I fix CVE-2019-15040?
To fix CVE-2019-15040, upgrade your JetBrains YouTrack to version 2019.1 or later.
3
Which versions of JetBrains YouTrack are affected by CVE-2019-15040?
CVE-2019-15040 affects all JetBrains YouTrack versions prior to 2019.1.
4
What type of vulnerability is CVE-2019-15040?
CVE-2019-15040 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
What could an attacker achieve by exploiting CVE-2019-15040?
An attacker exploiting CVE-2019-15040 could potentially perform unauthorized actions on the settings page of JetBrains YouTrack.