JetBrains ≫ YouTrack

105 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

7.6

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible

5.3

In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning

7.5

In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API

5.5

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs

7.8

In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration

9.8

In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox

5.3

In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication

6.5

In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack

6.5

In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector

5.3

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding