CVE-2019-12867

CRITICAL 9.8CVE-2019-12867 · Published 03/07/2019 · updated 17/06/2026

In short

CVE-2019-12867 is a CRITICAL (CVSS 9.8) vulnerability affecting youtrack (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.7% of all vulnerabilities.
Fix: update to 2018.4.49168 or later.

Package	Affected versions	Patched versions
youtrack jetbrains	`< 2018.4.49168`	`2018.4.49168`

Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.