← Back to CVE Explorer

CVE-2026-123331

Full vulnerability record from the local CVENow database.

Description

In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

Severity
MEDIUM
CVSS score
5.4 (v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-11-06 11:17:13.460000
Last modified
2026-11-06 20:20:20.757000
View original CVE JSON
{
  "id": "CVE-2026-123331",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-06T11:17:13.460",
  "lastModified": "2026-11-06T20:20:20.757",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles"
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "JetBrains",
          "product": "YouTrack",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "2026.2.19197",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-11-06T15:12:11.874571Z",
          "id": "CVE-2026-123331",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.jetbrains.com/privacy-security/issues-fixed/",
      "source": "[email protected]"
    }
  ]
}