Vulnerability Database

318,206

Total vulnerabilities in the database

CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions

Published: Jul 28, 2025
Updated: Nov 16, 2025
CVE: CVE-2025-54527
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.1
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-1021

Affected Software
References

Software	From	Fixed in
jetbrains / youtrack	-	2025.2.86935
jetbrains / youtrack	2025.2.87000	2025.2.87167
jetbrains / youtrack	2025.3	2025.3.87341

https://www.jetbrains.com/privacy-security/issues-fixed/

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo