PT-2025-46154
CVE-2025-64685
·
Published
2025-11-10
·
Updated
2025-11-21
Description by
CVSS 2.0
8.5
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions
JetBrains YouTrack versions prior to 2025.3.104432
Description
The issue concerns missing TLS certificate validation in JetBrains YouTrack. This lack of validation disables proper verification of server certificates when establishing TLS connections, potentially leading to data disclosure.
Recommendations
Update JetBrains YouTrack to version 2025.3.104432 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾