Show filters
456 Total Results
Displaying 31-40 of 456
Sort by:
Attacker Value
Unknown
CVE-2024-50582
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements
0
Attacker Value
Unknown
CVE-2024-50581
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag
0
Attacker Value
Unknown
CVE-2024-50580
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule
0
Attacker Value
Unknown
CVE-2024-50579
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible
0
Attacker Value
Unknown
CVE-2024-50578
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page
0
Attacker Value
Unknown
CVE-2024-50577
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings
0
Attacker Value
Unknown
CVE-2024-50576
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest
0
Attacker Value
Unknown
CVE-2024-50575
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API
0
Attacker Value
Unknown
CVE-2024-50574
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality
0
Attacker Value
Unknown
CVE-2024-50573
Disclosure Date: October 28, 2024 (last updated October 30, 2024)
In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services
0
