CVE-2025-54527CWE-1021

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass…

Medium · published July 28, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

In JetBrains YouTrack before 2025.2.86935,

2025.2.87167,

2025.3.87341,

2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-07-28T16:20Z
EPSS history
Timeline
  • 28 JUL 16:20Z
    In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass…
    cvelistv5