CVE-2025-54527

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass security restrictions
CVSS

No CVSS.

Configurations

No configuration.

History

28 Jul 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-28 17:15

Updated : 2025-07-28 17:15


NVD link : CVE-2025-54527

Mitre link : CVE-2025-54527


JSON object : View

Products Affected

No product.

CWE
CWE-1021

Improper Restriction of Rendered UI Layers or Frames