CVE-2019-15041: JetBrains Youtrack

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.

Affected products

• JetBrains Youtrack: before 2019.1.52545 (fixed in 2019.1.52545)

Published 2019-10-01. Last modified 2026-06-17.