Security Advisory
CVE-2019-12866
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.