CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-53959: In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible

7.6 CVSS

Description

In JetBrains YouTrack before 2025.2.86069,
2024.3.85077,
2025.1.86199 email spoofing via an administrative API was possible

Classification

CVE ID: CVE-2025-53959

CVSS Base Severity: HIGH

CVSS Base Score: 7.6

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Problem Types

CWE-862

Affected Products

Vendor: JetBrains

Product: YouTrack

References

https://nvd.nist.gov/vuln/detail/CVE-2025-53959
https://www.jetbrains.com/privacy-security/issues-fixed/

Timeline