CVE-2020-24618

MEDIUM 6.5CVE-2020-24618 · Published 27/08/2020 · updated 17/06/2026

In short

CVE-2020-24618 is a MEDIUM (CVSS 6.5) vulnerability affecting youtrack (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
Fix: update to 2019.2.65515, 2019.3.65516, 2020.1.11011, 2020.2.11008 or later.

Package	Affected versions	Patched versions
youtrack jetbrains	`≥ 2019.2.0, < 2019.2.65515≥ 2019.3, < 2019.3.65516≥ 2020.1, < 2020.1.11011≥ 2020.2, < 2020.2.11008≥ 2020.3, < 2020.3.4313< 2019.1.65514`	`2019.2.655152019.3.655162020.1.110112020.2.110082020.3.43132019.1.65514`

Description

In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.

References

blog.jetbrains.com · Vendor Advisory
blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 · Vendor Advisory
youtrack.jetbrains.com/issue/JT-59265 · Vendor Advisory

More vulnerabilities in youtrack

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

youtrack

jetbrains

≥ 2019.2.0, < 2019.2.65515≥ 2019.3, < 2019.3.65516≥ 2020.1, < 2020.1.11011≥ 2020.2, < 2020.2.11008≥ 2020.3, < 2020.3.4313< 2019.1.65514

2019.2.655152019.3.655162020.1.110112020.2.110082020.3.43132019.1.65514

More vulnerabilities in youtrack

See all →