Known vulnerabilities in YouTrack 2025.2.100871

Vendor: JetBrains s.r.o.

Software: YouTrack

Version: 2025.2.100871

Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*

Website: https://www.jetbrains.com/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU143830 - Missing Authentication for Critical Function CVE-2026-62422	CWE-306	Low	No	No	2024.2.148429, 2024.3.148430, 2025.1.148120, 2025.2.148048, 2025.3.148033, 2026.1.13757	17.08.2026	SB2026081793
#VU129685 - Improper Neutralization of Special Elements Used in a Template Engine CVE-2026-33392	CWE-1336	Low	No	No	2025.3.131383	05.05.2026	SB2026050547
#VU123264 - Missing Authorization CVE-2026-28193	CWE-862	Medium	No	No	2025.3.121962	25.02.2026	SB2026022545
#VU118311 - Allocation of Resources Without Limits or Throttling CVE-2025-64773	CWE-770	Low	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118235 - Operation on a Resource after Expiration or Release CVE-2025-64686	CWE-672	Low	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118234 - Improper Certificate Validation CVE-2025-64685	CWE-295	Medium	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118233 - Missing Authorization CVE-2025-64684	CWE-862	Low	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118232 - Missing Authorization CVE-2025-64690	CWE-862	Medium	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118231 - Insufficiently Protected Credentials CVE-2025-64689	CWE-522	High	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118230 - Authorization Bypass Through User-Controlled Key CVE-2025-64688	CWE-639	Medium	No	No	2025.3.104432	11.11.2025	SB2025111101
#VU118229 - Missing Authorization CVE-2025-64687	CWE-862	Medium	No	No	2025.3.104432	10.11.2025	SB2025111101