CVE-2025-64686 in YouTrack

Sumário

de MITRE • 10/11/2025

In JetBrains YouTrack before 2025.3.104432 missing user principal cleanup led to reuse of incorrect authorization context

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: JetBrains
• Reservar: 07/11/2025
• Divulgação: 10/11/2025
• Moderação: revogado
• Entrada: VDB-331677
• CPE: pronto
• CWE: CWE-672 (confirmado)
• CVSS: 5.3 (NVD)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-64686
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-64686
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-64686/