PT-2019-14551 · Jetbrains · Youtrack

Publicado 2019-10-02 · Atualizado 2019-10-03 · CVE-2019-16171

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.2.56595

Description A stored XSS issue was discovered on the issue page, which could potentially lead to malicious script execution.

Recommendations For versions prior to 2019.2.56595, update to version 2019.2.56595 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-16171

Produtos afetados

Youtrack

Referências · 3

• https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16171 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-16171 · Aviso do Fabricante