7.4
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Description
In JetBrains YouTrack before 2025.3.104432 missing VCS URL validation allowed delegation to unauthorized repositories from the Junie widget
Basic Information
ID
CVE-2025-64688
Source
JetBrains
Published
Nov 10, 2025 at 13:27
Modified
Nov 10, 2025 at 14:47
Affected Product
Vendor
JetBrains
Product
YouTrack
Affected Versions
JetBrains YouTrack 0