critical9.8
CVE-2019-12866
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack.
Impact
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Youtrack | before 2018.4.49168 |