Latest vulnerabilities for "jetbrains youtrack"

5.4

First published (updated )

CVE-2024-50582

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2024-50581

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2024-50580

Jetbrains YoutrackXSS

6.1

First published (updated )

CVE-2024-50579

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2024-50578

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2024-50577

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2024-50576

Jetbrains YoutrackXSS

6.1

First published (updated )

CVE-2024-50575

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header pars…

7.5

First published (updated )

CVE-2024-50574

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execut…

8.1

First published (updated )

CVE-2024-49579

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update …

5.4

First published (updated )

CVE-2024-48902

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

5.3

First published (updated )

CVE-2024-47162

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflo…

4.3

First published (updated )

CVE-2024-47159

Jetbrains YoutrackIn JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permi…

5.3

First published (updated )

CVE-2024-47160

Jetbrains YoutrackIn JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site

7.5

First published (updated )

CVE-2024-38505

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackIn JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto…

8.1

First published (updated )

CVE-2024-38506

Jetbrains YoutrackIn JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to …

5.3

First published (updated )

CVE-2024-38504

Jetbrains YoutrackXSS

5.4

EPSS

0.04%

First published (updated )

CVE-2024-22370

Jetbrains YoutrackIn JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread repl…

4.3

First published (updated )

CVE-2023-50871

Jetbrains YoutrackIn JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms

7.3

First published (updated )

CVE-2023-38068

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2023-35054

Jetbrains YoutrackIn JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms

7.5

First published (updated )

CVE-2023-35053

Jetbrains YoutrackXSS

7.3

First published (updated )

CVE-2022-28650

Jetbrains YoutrackIn JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party do…

5.4

First published (updated )

CVE-2022-28649

Jetbrains YoutrackXSS

5.7

First published (updated )

CVE-2022-28648

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackCode Injection

9.8

First published (updated )

CVE-2022-24442

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2022-24347

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2022-24344

Jetbrains YoutrackIn JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only pe…

4.3

First published (updated )

CVE-2022-24343

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2021-43184

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackJetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.

9.8

First published (updated )

CVE-2021-43185

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2021-43186

Jetbrains YoutrackIn JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding perm…

4.3

First published (updated )

CVE-2021-37554

Jetbrains YoutrackWeak RNG

7.5

First published (updated )

CVE-2021-37553

Jetbrains YoutrackIn JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.

5.3

First published (updated )

CVE-2021-37551

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2021-37552

Jetbrains YoutrackIn JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.

7.5

First published (updated )

CVE-2021-37550

Jetbrains YoutrackIn JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.

9.1

First published (updated )

CVE-2021-37549

Jetbrains YoutrackIn JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.

7.5

First published (updated )

CVE-2021-31905

Jetbrains YoutrackIn JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemen…

7.5

First published (updated )

CVE-2021-31902

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackXSS

6.1

First published (updated )

CVE-2021-31903

Jetbrains YoutrackXSS

5.4

First published (updated )

CVE-2021-27733

Jetbrains YoutrackIn JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.

5

First published (updated )

CVE-2021-25771

Jetbrains YoutrackCode Injection

9.8

First published (updated )

CVE-2021-25770

Jetbrains YoutrackIn JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachmen…

7.5

First published (updated )

CVE-2021-25769

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jetbrains YoutrackIn JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperl…

5.3

First published (updated )

CVE-2021-25768

Jetbrains YoutrackIn JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack comma…

5.3

First published (updated )

CVE-2021-25767

Jetbrains YoutrackIn JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.

5.3

First published (updated )

CVE-2021-25766

Jetbrains YoutrackIn JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without…

5.3

First published (updated )

CVE-2020-25208

Jetbrains YoutrackCSRF

8.8

First published (updated )

CVE-2021-25765

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.