Medium · 6.1 CVE-2025-54527 EUVD-2025-22927GHSA-h9pf-4j3g-qfj9

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows …

Published Jul 28, 2025 · Updated Jul 28, 2025 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2025.2.86935,
2025.2.87167,
2025.3.87341,
2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions

Affected products

Vendor	Product	Affected	Fixed
JetBrains	YouTrack	< 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344	2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344

References

https://www.jetbrains.com/privacy-security/issues-fixed/