What’s Vulnerable › Vulnerabilities

CVE-2020-24618

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-27 · updated 2026-06-17

Description

In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.

Affected products

• JetBrains YouTrack: before 2019.1.65514; from 2019.2.0 before 2019.2.65515; from 2019.3 before 2019.3.65516; from 2020.1 before 2020.1.11011; from 2020.2 before 2020.2.11008; from 2020.3 before 2020.3.4313 — fixed in 2019.1.65514, 2019.2.65515, 2019.3.65516, 2020.1.11011, 2020.2.11008, 2020.3.4313

How to fix

Upgrade to a fixed version: JetBrains YouTrack 2019.1.65514, 2019.2.65515, 2019.3.65516, 2020.1.11011. Check the vendor advisory for mitigations.

References

• https://blog.jetbrains.com
• https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
• https://youtrack.jetbrains.com/issue/JT-59265
• https://blog.jetbrains.com
• https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
• https://youtrack.jetbrains.com/issue/JT-59265

Get alerted when CVE-2020-24618 or the next vulnerability affects your stack