JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.

Published Feb 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre