Ein Angreifer kann mehrere Schwachstellen in JetBrains You Track ausnutzen, um Benutzerkonten zu übernehmen, Berechtigungen zu erweitern, auf geschützte Informationen und Ressourcen zuzugreifen, Daten offenzulegen oder unbefugt zu verändern, Tokens bzw. Zugangsdaten zu entwenden, Webhooks zu fälschen und gespeicherten Cross-Site-Scripting-Code (XSS) auszuführen.
[NEU] [hoch] JetBrains You Track: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-09-08 11:54 UTC
- Importiert: 2026-09-10 12:20 UTC
- CVSS: 9.8
- Quelle-ID:
cert_bund - uid_hash:
96e0fe46f9650c8e93758f34f3f92536391421c8afa921c3e86f05db1322fb90
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2026-09-07 |
|||
CRITICAL |
9.8 |
HIGH |
8 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-09-07 |
|||
CRITICAL |
9.8 |
HIGH |
8.8 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
5.4 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.6 |
2026-09-07 |
|||
CRITICAL |
9.8 |
LOW |
3.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
LOW |
3.7 |
2026-09-07 |
|||
CRITICAL |
9.8 |
LOW |
3.1 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
LOW |
3.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
HIGH |
8.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
HIGH |
7.7 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.8 |
2026-09-07 |
|||
CRITICAL |
9.8 |
HIGH |
7.7 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-09-07 |
|||
CRITICAL |
9.8 |
MEDIUM |
5.5 |
2026-09-07 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| NVD | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |