Known vulnerabilities in YouTrack - page 3

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 70
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 70 known vulnerabilities: 1 critical, 2 high, 26 medium, 41 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 2021.4.35970 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43186		 CWE-79 Medium
No
No
 2021.3.24402 08.11.2021 SB2021110821
#VU58012 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-43185		 CWE-74 Medium
No
No
 2021.3.23639 08.11.2021 SB2021110820
#VU58011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43184		 CWE-79 Low
No
No
 2021.3.21051 08.11.2021 SB2021110819
#VU55614 - Improper Access Control
CVE-2021-37554		 CWE-284 Low
No
No
 2021.3.21051 05.08.2021 SB2021080522
#VU55613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37552		 CWE-79 Low
No
No
 2021.2.17925 05.08.2021 SB2021080521
#VU55612 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-37553		 CWE-338 Low
No
No
 2021.2.16363 05.08.2021 SB2021080520
#VU55611 - Inadequate Encryption Strength
CVE-2021-37551		 CWE-326 Low
No
No
 2021.2.16363 05.08.2021 SB2021080520
#VU55610 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-37550		 CWE-367 Low
No
No
 2021.2.16363 05.08.2021 SB2021080520
#VU55609 - Protection Mechanism Failure
CVE-2021-37549		 CWE-693 Medium
No
No
 2021.1.11111 05.08.2021 SB2021080519
#VU46193 - Incorrect Default Permissions
CVE-2020-15821		 CWE-276 Medium
No
No
 2020.2.6881 01.09.2020 SB2020080810
#VU46192 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15817		 CWE-94 Medium
No
No
 2020.1.1331 01.09.2020 SB2020080814
#VU46191 - Improper input validation
CVE-2020-11693		 CWE-20 Medium
No
No
 2020.1.659 01.09.2020 SB2020042250
#VU46190 - Incorrect Default Permissions
CVE-2020-11692		 CWE-276 Low
No
No
 2020.1.659 01.09.2020 SB2020042250
#VU46189 - Server-Side Request Forgery (SSRF)
CVE-2020-15823		 CWE-918 Medium
Available
No
 2020.2.8873 01.09.2020 SB2020080813
#VU46186 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15820		 CWE-200 Medium
No
No
 2020.2.6881 01.09.2020 SB2020080810
#VU46185 - Server-Side Request Forgery (SSRF)
CVE-2020-15819		 CWE-918 Medium
No
No
 2020.2.10643 01.09.2020 SB2020080812
#VU46183 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15818		 CWE-200 Medium
No
No
 2020.2.8527 01.09.2020 SB2020080811
#VU46182 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24618		 CWE-200 Medium
Available
No
 2019.1.65514, 2019.2.65515, 2019.3.65516, 2020.1.11011, 2020.2.11008, 2020.3.4313 01.09.2020 SB2020090121
SB2020090124
#VU24912 - Origin Validation Error
 CWE-346 Medium
No
No
 - 04.02.2020 SB2020020414


Showing elements 41 - 60 out of 70