CVE-2025-24458

Mô tả

Tham khảo

• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

Lỗ hổng khác của youtrack

• CVE-2026-103497TRUNG BÌNH 5.5In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration
• CVE-2026-103496TRUNG BÌNH 5.4In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications
• CVE-2026-103495TRUNG BÌNH 4.3In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs
• CVE-2026-103494TRUNG BÌNH 6.6In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes
• CVE-2026-103493CAO 8.1In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible