CVE-2020-25208 – In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate use

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25208

Reference (s):

• https://blog.jetbrains.com
• https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/