Show filters
100 Total Results
Displaying 51-60 of 100
Sort by:
Attacker Value
Unknown

CVE-2021-37549

Disclosure Date: August 06, 2021 (last updated November 28, 2024)
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
Attacker Value
Unknown

CVE-2021-37553

Disclosure Date: August 06, 2021 (last updated February 23, 2025)
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
Attacker Value
Unknown

CVE-2021-37554

Disclosure Date: August 06, 2021 (last updated November 28, 2024)
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
Attacker Value
Unknown

CVE-2021-37551

Disclosure Date: August 06, 2021 (last updated February 23, 2025)
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.
Attacker Value
Unknown

CVE-2021-37550

Disclosure Date: August 06, 2021 (last updated February 23, 2025)
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.
Attacker Value
Unknown

CVE-2021-37552

Disclosure Date: August 06, 2021 (last updated February 23, 2025)
In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.
Attacker Value
Unknown

CVE-2021-31903

Disclosure Date: May 11, 2021 (last updated February 22, 2025)
In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
Attacker Value
Unknown

CVE-2021-31905

Disclosure Date: May 11, 2021 (last updated November 28, 2024)
In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
Attacker Value
Unknown

CVE-2021-27733

Disclosure Date: May 11, 2021 (last updated February 22, 2025)
In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.
Attacker Value
Unknown

CVE-2021-31902

Disclosure Date: May 11, 2021 (last updated February 22, 2025)
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.