medium6.1

CVE-2019-15041

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.

Impact

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.

Affected products

Vendor	Product	Affected versions
Jetbrains	Youtrack	before 2019.1.52545

Weakness classification

CWE-601

References

NVD record
CVE.org record
https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/