{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "YouTrack ist eine webbasierte Plattform für Projektmanagement, Issue- und Bug-Tracking, Helpdesk sowie die Verwaltung und Nachverfolgung von Arbeitsabläufen und Aufgaben.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in JetBrains You Track ausnutzen, um Benutzerkonten zu übernehmen, Berechtigungen zu erweitern, auf geschützte Informationen und Ressourcen zuzugreifen, Daten offenzulegen oder unbefugt zu verändern, Tokens bzw. Zugangsdaten zu entwenden, Webhooks zu fälschen und gespeicherten Cross-Site-Scripting-Code (XSS) auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3226 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3226.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3226 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3226"
    }, {
      "category" : "external",
      "summary" : "JetBrains Fixed security issues vom 2026-09-07",
      "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86478"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86479"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86481"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86482"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86483"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86484"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86485"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86486"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86487"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86488"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86489"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86490"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86491"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86492"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86493"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86494"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86495"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86496"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86497"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86498"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86499"
    }, {
      "category" : "external",
      "summary" : "NIST Vunerability Database vom 2026-09-07",
      "url" : "https://nvd.nist.gov/vuln/detail/cve-2026-86500"
    } ],
    "source_lang" : "en-US",
    "title" : "JetBrains You Track: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-09-07T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-09-08T11:54:22.473+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3226",
      "initial_release_date" : "2026-09-07T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-09-07T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.2.18634",
          "product" : {
            "name" : "JetBrains You Track <2026.2.18634",
            "product_id" : "T059121"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.18634",
          "product" : {
            "name" : "JetBrains You Track 2026.2.18634",
            "product_id" : "T059121-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.2.18634"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.160480",
          "product" : {
            "name" : "JetBrains You Track <2025.3.160480",
            "product_id" : "T059122"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.160480",
          "product" : {
            "name" : "JetBrains You Track 2025.3.160480",
            "product_id" : "T059122-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2025.3.160480"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.14047",
          "product" : {
            "name" : "JetBrains You Track <2026.1.14047",
            "product_id" : "T059123"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.14047",
          "product" : {
            "name" : "JetBrains You Track 2026.1.14047",
            "product_id" : "T059123-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.1.14047"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.161254",
          "product" : {
            "name" : "JetBrains You Track <2025.3.161254",
            "product_id" : "T059124"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.161254",
          "product" : {
            "name" : "JetBrains You Track 2025.3.161254",
            "product_id" : "T059124-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2025.3.161254"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.14042",
          "product" : {
            "name" : "JetBrains You Track <2026.1.14042",
            "product_id" : "T059125"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.14042",
          "product" : {
            "name" : "JetBrains You Track 2026.1.14042",
            "product_id" : "T059125-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.1.14042"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.18788",
          "product" : {
            "name" : "JetBrains You Track <2026.2.18788",
            "product_id" : "T059126"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.18788",
          "product" : {
            "name" : "JetBrains You Track 2026.2.18788",
            "product_id" : "T059126-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.2.18788"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.14055",
          "product" : {
            "name" : "JetBrains You Track <2026.1.14055",
            "product_id" : "T059127"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.14055",
          "product" : {
            "name" : "JetBrains You Track 2026.1.14055",
            "product_id" : "T059127-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.1.14055"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "You Track"
      } ],
      "category" : "vendor",
      "name" : "JetBrains"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-86478",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86478"
  }, {
    "cve" : "CVE-2026-86479",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86479"
  }, {
    "cve" : "CVE-2026-86481",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86481"
  }, {
    "cve" : "CVE-2026-86482",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86482"
  }, {
    "cve" : "CVE-2026-86483",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86483"
  }, {
    "cve" : "CVE-2026-86484",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86484"
  }, {
    "cve" : "CVE-2026-86485",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86485"
  }, {
    "cve" : "CVE-2026-86486",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86486"
  }, {
    "cve" : "CVE-2026-86487",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86487"
  }, {
    "cve" : "CVE-2026-86488",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86488"
  }, {
    "cve" : "CVE-2026-86489",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86489"
  }, {
    "cve" : "CVE-2026-86490",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86490"
  }, {
    "cve" : "CVE-2026-86491",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86491"
  }, {
    "cve" : "CVE-2026-86492",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86492"
  }, {
    "cve" : "CVE-2026-86493",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86493"
  }, {
    "cve" : "CVE-2026-86494",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86494"
  }, {
    "cve" : "CVE-2026-86495",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86495"
  }, {
    "cve" : "CVE-2026-86496",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86496"
  }, {
    "cve" : "CVE-2026-86497",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86497"
  }, {
    "cve" : "CVE-2026-86498",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86498"
  }, {
    "cve" : "CVE-2026-86499",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86499"
  }, {
    "cve" : "CVE-2026-86500",
    "product_status" : {
      "known_affected" : [ "T059122", "T059121", "T059124", "T059123", "T059126", "T059125", "T059127" ]
    },
    "release_date" : "2026-09-07T22:00:00.000+00:00",
    "title" : "CVE-2026-86500"
  } ]
}