In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.
| Software | From | Fixed in |
|---|---|---|
| jetbrains / youtrack | 2020.3 | 2020.3.4313 |
| jetbrains / youtrack | - | 2019.1.65514 |
| jetbrains / youtrack | 2020.2 | 2020.2.11008 |
| jetbrains / youtrack | 2019.3 | 2019.3.65516 |
| jetbrains / youtrack | 2020.1 | 2020.1.11011 |
| jetbrains / youtrack | 2019.2.0 | 2019.2.65515 |