Description
In JetBrains YouTrack before 2025.3.170763,
2026.1.14150,
2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2025.3.170763, 2026.1.14150, 2026.2.19656 | 2025.3.170763, 2026.1.14150, 2026.2.19656 |
Advisories 1
- WID-SEC-2026-4378 JetBrains You Track: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026