Description
In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | 2022.1.43700 – < 2022.1.43700 | 2022.1.43700 |
High · 7.3
CVE-2022-28650
EUVD-2022-33092GHSA-x8w2-gg3q-hjwf
In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI
Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by JetBrains