JetBrains ≫ YouTrack

105 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

9.8

CVE-2021-25770

In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.

8.8

In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible.

5.3

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.

5.3

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.

5.3

JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.

5.3

In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.

5.3

JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.

3.3

Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.

7.5

In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API.