CVE-2020-25208

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*

Information

Published : 2021-02-03 08:15

Updated : 2021-02-05 11:20


NVD link : CVE-2020-25208

Mitre link : CVE-2020-25208


JSON object : View

CWE
CWE-276

Incorrect Default Permissions

Advertisement

dedicated server usa

Products Affected

jetbrains

  • youtrack