In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags…

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

In JetBrains YouTrack before 2026.2.19562,
2026.1.14137,
2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• jetbrains.com/privacy-security/issues-fixed Diğer

Kayıt geçmişi

1. 6 Kas 2026 13:28Yayımlandı

İlgili açıklar

• 3,1 CVE-2026-123337In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
• 3,8 CVE-2026-123334In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by…
• 3,1 CVE-2026-123336In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion
• 4,7 CVE-2026-123332In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server co…
• 3,8 CVE-2026-123333In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sp…
• 5,4 CVE-2026-123329In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other p…