youtrack

CVE-2021-43184

February 23, 2023 by

In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.

February 23, 2023 by

In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.

February 23, 2023 by

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.

February 23, 2023 by

In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.

February 23, 2023 by

In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.

February 23, 2023 by

In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.