PT-2019-13950

CVE-2019-15041

Published

2019-10-01

Updated

2019-10-08

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.1.52545

Description The issue arises from unbounded URL whitelisting due to the inclusion of functionality from an untrusted control sphere.

Recommendations For versions prior to 2019.1.52545, update to version 2019.1.52545 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾