Jetbrains Youtrack vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jetbrains Youtrack: 83 record(s), with affected versions and fixes.cpe:2.3:a:jetbrains:youtrack
CVE-2026-49369
Medium · 4.3
CWE-863 May 29, 2026
Incorrect Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages
CVE-2026-49368
Medium · 5.4
CWE-79 May 29, 2026
Cross-site Scripting (XSS) in Jetbrains Youtrack
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
CVE-2026-33392
High · 7.2
CWE-1336 Apr 17, 2026
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass
In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass
CVE-2026-28193
Medium · 5.3
CWE-862 Feb 25, 2026
Missing Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
CVE-2026-25846
Medium · 6.5
CWE-532 Feb 9, 2026
Insertion of Sensitive Information into Log File in Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs
CVE-2025-64773
Low · 3.7
CWE-362 Nov 11, 2025
In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
CVE-2025-64685
High · 7.5
CWE-295 Nov 10, 2025
Improper Certificate Validation in Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure
CVE-2025-64684
High · 7.5
CWE-862 Nov 10, 2025
Missing Authorization in Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form