CVE-2025-64684 MEDIUM

CVE-2025-64684

Vendor Jetbrains
Product YouTrack
Weakness CWE-862 · Missing authorization
Published November 10, 2025
Last update November 10, 2025
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form

Key dates

02Disclosure timeline

November 10, 2025 CVE published
November 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-58664 WordPress Text To Speech TTS Accessibility plugin <= 1.9.30 - Broken Access Control vulnerability CVE-2025-58221 WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability CVE-2023-44148 WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2024-13419 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-5612 Missing Authorization in GitLab