CVE-2025-54527

JetBrains / YouTrack PUBLISHED

Description (CNA)

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions

Affected (CNA)

Vendor / product	Versions
JetBrains / YouTrack	affected 0 before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344

CWE

CWE-1021

References

https://www.jetbrains.com/privacy-security/issues-fixed/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.