CVE Field Guide
About Us
CVE-2026-103497
PUBLISHED
Assigner:
JetBrains
Reserved:
30.09.2026
Published:
01.10.2026
Updated:
01.10.2026
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
CVSS Score:
5.5
CVSS score
5.5
Attack Vector
Network
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
Low
Privileges Required
High
Integrity Impact
Low
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
JetBrains
Product
YouTrack
Versions
Default:
unaffected
affected from 0 to 2026.2.19422 (excl.)
References
https://www.jetbrains.com/privacy-security/issues-fixed/
Problem Types
CWE-918