In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.

Published Oct 19, 2020 · Updated Aug 4, 2024 · Assigned by mitre