CVE-2019-16171

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 2, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-161725.4LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attackCVE-2019-161735.4LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This ocCVE-2019-161748.8An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files andCVE-2019-161754.3A clickjacking vulnerability was found in Limesurvey before 3.17.14.CVE-2019-161765.3A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the applicationCVE-2019-161777.5In Limesurvey before 3.17.14, the entire database is exposed through browser caching.CVE-2019-161785.4A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permisCVE-2019-161795.3Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.CVE-2019-16187.8A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated,CVE-2019-161805.3Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method iCVE-2019-161812.7In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.CVE-2019-161826.1A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary
CVE-2019-16171: Medium severity, CVSS 6.1 | Vulnix