CVE-2025-57731 - In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content

Back Back to CVE browser

HIGH

In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content

Published Aug 20, 2025

8.7

HIGH

CVSS 3.1

EPSS 0.28%

Description

In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content

Affected products

Vendor JetBrains Product YouTrack Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2025.2.92387

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

JetBrains

YouTrack

unaffected

Version	Status	Constraints
0	affected	<2025.2.92387

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28621
Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28621		Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner JetBrains

Published Aug 20, 2025

Updated Aug 20, 2025

Reserved Aug 18, 2025

Link CVE-2025-57731

CISA Vulnrichment

Updated Aug 20, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-57731

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-57731

ENISA EUVD

Assigner JetBrains

Published Aug 20, 2025

Updated Aug 20, 2025

Exploited since n/a

Link EUVD-2025-28621

EUVD-2025-28621