PT-2025-22284 · Jetbrains · Youtrack

CVE-2025-48391

·

Published

2025-05-14

·

Updated

2025-09-30

CVSS v3.1

7.7

High

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.1.76253
Description The issue is related to missing permission checks in the API, which allowed deletion of issues.
Recommendations For versions prior to 2025.1.76253, update to version 2025.1.76253 or later to resolve the issue.

Fix

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-06453
CVE-2025-48391

Affected Products

Youtrack