PT-2021-16781 · Jetbrains · Youtrack

Vasily Vasilkov · Published 2021-02-03 · Updated 2021-02-05 · CVE-2021-25769

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.4.6808

Description The issue affects the access rights of the YouTrack administrator, preventing them from accessing attachments.

Recommendations For versions prior to 2020.4.6808, update to version 2020.4.6808 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-25769

Affected Products

Youtrack

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-25769 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25769 · Vendor Advisory
• https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020 · Vendor Advisory
• https://blog.jetbrains.com · Note
• https://t.me/cibsecurity/23016 · Telegram Post