JetBrains ≫ YouTrack

105 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2021-37552

In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.

7.5

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.

4.3

In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.

5.4

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.

7.5

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.

6.1

In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.

7.5

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.

5.3

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution.

5.3

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly.

7.5

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments.