CVE-2025-54527

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.2.86935 JetBrains YouTrack version 2025.2.86935 JetBrains YouTrack versions 2025.2.86935 through 2025.2.87167 JetBrains YouTrack version 2025.3.87341 JetBrains YouTrack versions 2025.3.87341 through 2025.3.87344

Description The software contains an improper iframe configuration within the widget sandbox, which allows popups to bypass security restrictions.

Recommendations Update JetBrains YouTrack to a version later than 2025.2.86935. Update JetBrains YouTrack to version 2025.2.86935. Update JetBrains YouTrack to a version later than 2025.2.87167. Update JetBrains YouTrack to a version later than 2025.3.87341. Update JetBrains YouTrack to a version later than 2025.3.87344.