Vulnerabilidades do Jetbrains Youtrack

CVE-2026-49369 Média · 4.3 CWE-863 29/05/2026

Incorrect Authorization em Jetbrains Youtrack

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages

CVE-2026-49368 Média · 5.4 CWE-79 29/05/2026

Cross-site Scripting (XSS) em Jetbrains Youtrack

In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible

CVE-2026-33392 Alta · 7.2 CWE-1336 17/04/2026

In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via…

In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass

CVE-2026-28193 Média · 5.3 CWE-862 25/02/2026

Missing Authorization em Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint

CVE-2026-25846 Média · 6.5 CWE-532 09/02/2026

Insertion of Sensitive Information into Log File em Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs

CVE-2025-64773 Baixa · 3.7 CWE-362 11/11/2025

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit

CVE-2025-64685 Alta · 7.5 CWE-295 10/11/2025

Improper Certificate Validation em Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure

CVE-2025-64684 Alta · 7.5 CWE-862 10/11/2025

Missing Authorization em Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form