High severity8.4NVD Advisory· Published Nov 6, 2026
CVE-2026-123323
CVE-2026-123323
Description
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.