medium5.3
CVE-2020-25208
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.
Impact
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Youtrack | before 2020.4.4701 |