Security Advisory

CVE-2025-54527

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-28 16:20:38
Last updated 2025-07-28 17:26:29
Assigner JetBrains
State PUBLISHED

Description

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions