CVE-2026-123337
Full vulnerability record from the local CVENow database.
Description
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
Severity
LOW
CVSS score
3.1
(v3.1)
Vulnerability status
Received
Source identifier
Published
2026-11-06 11:17:14.250000
Last modified
2026-11-06 15:17:17.263000
View original CVE JSON
{
"id": "CVE-2026-123337",
"sourceIdentifier": "[email protected]",
"published": "2026-11-06T11:17:14.250",
"lastModified": "2026-11-06T15:17:17.263",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility"
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "JetBrains",
"product": "YouTrack",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "2026.2.19656",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.1,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-06T13:51:52.297350Z",
"id": "CVE-2026-123337",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://www.jetbrains.com/privacy-security/issues-fixed/",
"source": "[email protected]"
}
]
}