medium6.1
CVE-2025-54527
In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass sec…
Impact
In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Youtrack | before 2025.2.86935 from 2025.2.87000 before 2025.2.87167 from 2025.3 before 2025.3.87341 |