JetBrains Youtrack Mobile vulnerabilities

6 CVEs affecting JetBrains Youtrack Mobile, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43192, published 2021-11-09.

More from JetBrains.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-43187, published 2021-11-09. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information.
• CVE-2021-43189, published 2021-11-09. High severity, CVSS 7.3. EPSS: 0.8% chance of exploitation in the next 30 days. In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.
• CVE-2021-43188, published 2021-11-09. High severity, CVSS 7.3. EPSS: 0.8% chance of exploitation in the next 30 days. In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.
• CVE-2021-43192, published 2021-11-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.
• CVE-2021-43191, published 2021-11-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.
• CVE-2021-43190, published 2021-11-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.