In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15817
Reference (s):
- https://blog.jetbrains.com
- https://blog.jetbrains.com/blog/2020/08/06/jetbrains-security-bulletin-q2-2020/

