Advisories · Technology

JetBrains YouTrack.

Every CVE that names JetBrains YouTrack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75046 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 17 Aug 2026
CVE-2026-75045 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authentication bypass in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 17 Aug 2026
CVE-2026-75044 CVE record

CVSS 8.1 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 17 Aug 2026
CVE-2026-62422 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 14 Jul 2026
CVE-2026-61492 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-59791 CVE record

CVSS 3.5 Low

Clickjacking in JetBrains YouTrack
- JetBrains YouTrack
- CWE-1021
Not analysed yet 10 Jul 2026
CVE-2026-57926 CVE record

CVSS 2.6 Low

Prototype pollution in JetBrains YouTrack
- JetBrains YouTrack
- Prototype pollution
Not analysed yet 26 Jun 2026
CVE-2026-57925 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-57924 CVE record

CVSS 4.3 Medium

Incorrect default permissions in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-57923 CVE record

CVSS 5.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-57922 CVE record

CVSS 3.1 Low

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-57921 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-49386 CVE record

CVSS 6.5 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49385 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49370 CVE record

CVSS 3.4 Low

Information disclosure in JetBrains YouTrack
- JetBrains YouTrack
- Information disclosure
Not analysed yet 29 May 2026
CVE-2026-49369 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49368 CVE record

CVSS 8.7 High

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 29 May 2026
CVE-2026-33392 CVE record

CVSS 7.2 High

Template injection in JetBrains YouTrack
- JetBrains YouTrack
- Code injection
Not analysed yet 17 Apr 2026
CVE-2026-28193 CVE record

CVSS 8.8 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 25 Feb 2026
CVE-2026-25846 CVE record

CVSS 6.5 Medium

Sensitive information in log files in JetBrains YouTrack
- JetBrains YouTrack
- Information disclosure
Not analysed yet 9 Feb 2026
CVE-2025-64773 CVE record

CVSS 2.7 Low

Race condition in JetBrains YouTrack
- JetBrains YouTrack
- Race condition
Not analysed yet 11 Nov 2025
CVE-2025-64685 CVE record

CVSS 8.1 High

Improper certificate validation in JetBrains YouTrack
- JetBrains YouTrack
- Weak cryptography or TLS
Not analysed yet 10 Nov 2025
CVE-2025-64684 CVE record

CVSS 4.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 10 Nov 2025
CVE-2025-57731 CVE record

CVSS 8.7 High

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-54527 CVE record

CVSS 6.1 Medium

Clickjacking in JetBrains YouTrack
- JetBrains YouTrack
- CWE-1021
Not analysed yet 28 Jul 2025
CVE-2025-53959 CVE record

CVSS 7.6 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-47850 CVE record

CVSS 4.3 Medium

Missing authentication in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 20 May 2025
CVE-2025-48391 CVE record

CVSS 7.7 High

Missing authentication in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 20 May 2025
CVE-2025-24458 CVE record

CVSS 7.1 High

Authentication bypass by spoofing in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 21 Jan 2025
CVE-2025-24457 CVE record

CVSS 5.5 Medium

Sensitive information in log files in JetBrains YouTrack
- JetBrains YouTrack
- Information disclosure
Not analysed yet 21 Jan 2025
CVE-2024-54158 CVE record

CVSS 3.5 Low

JetBrains YouTrack: In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack…
- JetBrains YouTrack
- CWE-173
Not analysed yet 4 Dec 2024
CVE-2024-54157 CVE record

CVSS 4.3 Medium

Regular expression denial of service in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 4 Dec 2024
CVE-2024-54156 CVE record

CVSS 4.2 Medium

Prototype pollution in JetBrains YouTrack
- JetBrains YouTrack
- Prototype pollution
Not analysed yet 4 Dec 2024
CVE-2024-54155 CVE record

CVSS 3.7 Low

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-54154 CVE record

CVSS 8.0 High

Path traversal in JetBrains YouTrack
- JetBrains YouTrack
- Path traversal
Not analysed yet 4 Dec 2024
CVE-2024-54153 CVE record

CVSS 3.1 Low

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 4 Dec 2024
CVE-2024-50582 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50581 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50580 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50579 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50578 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50577 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50576 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50575 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024
CVE-2024-50574 CVE record

CVSS 5.3 Medium

Regular expression denial of service in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 28 Oct 2024
CVE-2024-49579 CVE record

CVSS 8.1 High

JetBrains YouTrack: In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary…
- JetBrains YouTrack
- CWE-940
Not analysed yet 17 Oct 2024
CVE-2024-48902 CVE record

CVSS 5.4 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 10 Oct 2024
CVE-2024-47162 CVE record

CVSS 4.1 Medium

Insufficiently protected credentials in JetBrains YouTrack
- JetBrains YouTrack
- Hard-coded credentials
Not analysed yet 19 Sept 2024
CVE-2024-47160 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 19 Sept 2024
CVE-2024-47159 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 19 Sept 2024
CVE-2024-38506 CVE record

CVSS 6.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 18 Jun 2024
CVE-2024-38505 CVE record

CVSS 5.3 Medium

Insufficiently protected credentials in JetBrains YouTrack
- JetBrains YouTrack
- Hard-coded credentials
Not analysed yet 18 Jun 2024
CVE-2024-38504 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 18 Jun 2024
CVE-2024-35299 CVE record

CVSS 5.9 Medium

Improper certificate validation in JetBrains YouTrack
- JetBrains YouTrack
- Weak cryptography or TLS
Not analysed yet 16 May 2024
CVE-2024-28230 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Mar 2024
CVE-2024-28229 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Mar 2024
CVE-2024-28228 CVE record

CVSS 5.3 Medium

Authentication bypass by spoofing in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 7 Mar 2024
CVE-2024-22370 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2024
CVE-2023-50871 CVE record

CVSS 4.3 Medium

Improper authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 15 Dec 2023
CVE-2023-38068 CVE record

CVSS 6.5 Medium

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
- JetBrains YouTrack
- CWE-799
Not analysed yet 12 Jul 2023