CVE-2026-100271
2.7 FaibleDescription
In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 2.7 Faible | cve@jetbrains.com | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
Faiblesses (CWE)
Références
- https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory