CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-27625
https://notcve.org/view.php?id=CVE-2020-27625
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues. En JetBrains YouTrack versiones anteriores a 2020.3.888, unas notificaciones pueden haber mencionado problemas inaccesibles • https://blog.jetbrains.com •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-27626
https://notcve.org/view.php?id=CVE-2020-27626
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF. JetBrains YouTrack versiones anteriores a 2020.3.5333, era vulnerable a un ataque de tipo SSRF • https://blog.jetbrains.com https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-25209
https://notcve.org/view.php?id=CVE-2020-25209
In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. En JetBrains YouTrack versiones anteriores a 2020.3.6638, un control de acceso inapropiado para algunos subrecursos conlleva a una divulgación de información por medio de la API REST • https://blog.jetbrains.com https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-25210
https://notcve.org/view.php?id=CVE-2020-25210
In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. En JetBrains YouTrack versiones anteriores a 2020.3.7955, un atacante podía acceder a las reglas de workflow sin las concesiones de acceso apropiadas • https://blog.jetbrains.com https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2020-24618
https://notcve.org/view.php?id=CVE-2020-24618
In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access. En las versiones de JetBrains YouTrack versiones anteriores a 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515 y 2019.3.65516, un atacante puede recuperar una descripción de problema sin el acceso apropiado • https://blog.jetbrains.com https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 https://youtrack.jetbrains.com/issue/JT-59265 •