CVE-2025-54527

No fix known EPSS <1%CVSS 6.1

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions

Published 2025-07-28 · CVE record · OSV

Products: JetBrains YouTrack