YouTrack Exploitation

YouTrack is a project management and issue tracking tool used by JetBrains. This vulnerability allows attackers to extract sensitive information from the feedback form, potentially leading to data breaches.

This is JetBrains YouTrack version 2025.3.104432 or earlier. Check with: find / -name "youtrack*.jar" 2>/dev/null

Note: This CVE is specific to JetBrains YouTrack and not related to other products from the same vendor.

1. Upgrade to YouTrack version 2025.3.104432 or later.
2. Maven: Update your pom.xml dependency version
3. Check JetBrains website for updates: https://www.jetbrains.com/support/updates/
4. Immediate mitigations:
5. Restrict access to the feedback form (e.g., via a firewall)
6. Monitor for suspicious activity on the feedback form

• Vendor Advisory