Skip to content
OpenAdvisories
Medium · 4.6 CVE-2022-28649 EUVD-2022-33091GHSA-8xwr-xmx7-9p56

In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue description

Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: YouTrack

Description

In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue description

Affected products

VendorProductAffectedFixed
JetBrains YouTrack 2022.1.43563 – < 2022.1.43563 2022.1.43563

References