Jetbrains: >> Youtrack >> 2.19.2.65515 Security Vulnerabilities
In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs
CVSS Score
5.5
EPSS Score
0.0
Published
2025-01-21
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration
CVSS Score
7.1
EPSS Score
0.0
Published
2025-01-21
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox
CVSS Score
8.0
EPSS Score
0.001
Published
2024-12-04
In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication
CVSS Score
3.7
EPSS Score
0.0
Published
2024-12-04
In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack
CVSS Score
4.2
EPSS Score
0.0
Published
2024-12-04
In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector
CVSS Score
4.3
EPSS Score
0.0
Published
2024-12-04
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding
CVSS Score
3.5
EPSS Score
0.0
Published
2024-12-04
In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter
CVSS Score
3.1
EPSS Score
0.0
Published
2024-12-04
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page
CVSS Score
4.6
EPSS Score
0.162
Published
2024-10-28
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible
CVSS Score
4.6
EPSS Score
0.061
Published
2024-10-28
Page 1