6.1
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
In JetBrains YouTrack before 2025.2.86935,
2025.2.87167,
2025.3.87341,
2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions
2025.2.87167,
2025.3.87341,
2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions
Basic Information
ID
CVE-2025-54527
Source
JetBrains
Published
Jul 28, 2025 at 16:20
Modified
Jul 28, 2025 at 17:26
Affected Product
Vendor
JetBrains
Product
YouTrack
Affected Versions
JetBrains YouTrack 0