CVE-2021-31905

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-319062.7In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.CVE-2021-319075.3In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.CVE-2021-319085.4In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.CVE-2021-319099.8In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.CVE-2021-31918.8Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0CVE-2021-319107.5In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.CVE-2021-319116.1In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.CVE-2021-319128.8In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.CVE-2021-319137.5In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.CVE-2021-319149.8In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.CVE-2021-319159.8In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.CVE-2021-319166.7An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux k