Information Disclosure Vulnerability in JetBrains YouTrack
CVE-2025-64684

4.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
10 November 2025

What is CVE-2025-64684?

An information disclosure vulnerability exists in JetBrains YouTrack prior to version 2025.3.104432, which could allow unauthorized users to access sensitive information through the application's feedback form. Proper measures should be taken to ensure that users are protected from potential data leaks while using this software.

Affected Version(s)

YouTrack 0 < 2025.3.104432

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-64684 : Information Disclosure Vulnerability in JetBrains YouTrack