JetBrains ≫ YouTrack

97 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

7.5

CVE-2024-35299

In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation

6.5

In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions

6.5

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles

5.3

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible

5.4

In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible

4.3

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed

7.3

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms

5.4

In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible

7.5

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms

5.4

In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI