CVE-2023-35054: JetBrains Youtrack

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible

Affected products

• JetBrains Youtrack: before 2023.1.10518 (fixed in 2023.1.10518)

Published 2023-06-12. Last modified 2026-06-17.