cve-2026-123334

LOW CVSS 3.8 fkie_nvd
Description

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

Timeline
Published
unknown
Last Modified
unknown
CVSS Details
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
Affected Products

No product information available.

Weaknesses (CWE)
CWE-863
CVSS metrics
Version Base Severity Vector Exploitability Impact Source
3.1 3.8 LOW CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 1.2 2.5 cve@jetbrains.com
NVD metadata
NVD status
Received
Source identifier
cve@jetbrains.com
References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "YouTrack",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2026.2.19562",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "cve@jetbrains.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project"
    }
  ],
  "id": "CVE-2026-123334",
  "lastModified": "2026-11-06T11:17:13.853",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 3.8,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 2.5,
        "source": "cve@jetbrains.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-11-06T11:17:13.853",
  "references": [
    {
      "source": "cve@jetbrains.com",
      "url": "https://www.jetbrains.com/privacy-security/issues-fixed/"
    }
  ],
  "sourceIdentifier": "cve@jetbrains.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ],
      "source": "cve@jetbrains.com",
      "type": "Primary"
    }
  ]
}
View JSON API Download JSON