Approved changes feed: RSS · Atom

cpe:2.3:a:jetbrains:youtrack_integration:*:*:*:*:*:confluence:*:*

part: a version: * update: *

VendorJetbrains (b1b7db7a-bd16-5477-8e89-fb64c5636fcd)
ProductYoutrack Integration (95d9e5a2-27e2-5c04-973d-526f6a24fb54)
Edition*
Language*
Software edition*
Target softwareconfluence
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10100 vulnerable 2026-06-03 14:39:21.437087 Details available
In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely.
Published: 2019-07-03T18:15:32.000Z
Updated: 2024-08-04T22:10:09.835Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.