CVE-2022-28648: XSS
First published: Tue Apr 05 2022(Updated: )
In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered
Credit: security@jetbrains.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jetbrains Youtrack | <2022.1.43563 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-28648.
What software is affected by this vulnerability?
JetBrains YouTrack before version 2022.1.43563 is affected by this vulnerability.
What is the severity of CVE-2022-28648?
The severity of CVE-2022-28648 is medium with a CVSS score of 5.4.
How does this vulnerability manifest?
In JetBrains YouTrack before 2022.1.43563, HTML code from the issue description is being rendered.
How can I fix CVE-2022-28648?
To fix CVE-2022-28648, update JetBrains YouTrack to version 2022.1.43563 or later.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- agent/softwarecombine
- vendor/jetbrains
- canonical/jetbrains youtrack