PT-2026-103756 · Jetbrains · Youtrack
CVE-2026-103496
·
Published
2026-10-01
·
Updated
2026-10-01
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
JetBrains YouTrack versions prior to 2026.2.19422
Description
An Insecure Direct Object Reference (IDOR) exists in inbox threads, which allows an attacker to read notifications belonging to other users. IDOR is a type of access control vulnerability that occurs when an application uses user-supplied input to access objects directly without sufficient authorization checks.
Recommendations
Update to version 2026.2.19422.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Youtrack