PT-2020-16731

CVE-2020-27624

·

Published

2020-11-16

·

Updated

2020-11-21

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.3.888
Description The issue is related to a Server-Side Request Forgery (SSRF) problem. SSRF is a type of attack where an attacker can trick a server into making requests to internal or external resources that the server should not access.
Recommendations For versions prior to 2020.3.888, update to version 2020.3.888 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2020-27624
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com