CVE-2025-53959CWE-862

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible

High · published July 15, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

In JetBrains YouTrack before 2025.2.86069,

2024.3.85077,

2025.1.86199 email spoofing via an administrative API was possible

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-07-15T16:26Z
EPSS history
Timeline
  • 15 JUL 16:26Z
    In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible
    cvelistv5