Register for the AI for Security Summit: Join Figma, Perplexity & Wiz

CVE-2020-15822
YouTrack vulnerability analysis and mitigation

Overview

CVE-2020-15822 is a security vulnerability discovered in YouTrack that allowed Server-Side Request Forgery (SSRF) due to URL filtering bypass. The vulnerability was reported by security researcher Yurii Sanin and affected YouTrack's URL handling functionality (JetBrains Q2 2020).

Technical details

The vulnerability was classified as Low severity and involved the possibility of SSRF attacks due to the ability to escape URL filtering mechanisms. The issue was tracked internally as JT-58204 and was assigned CVE-2020-15822 (JetBrains Q2 2020).

Impact

The vulnerability could potentially allow attackers to perform Server-Side Request Forgery attacks, which might enable them to scan or interact with internal network resources that should not be accessible (JetBrains Q2 2020).

Mitigation and workarounds

The vulnerability was addressed and fixed in YouTrack version 2020.2.10514. Users were advised to upgrade to this version or later to mitigate the security risk (JetBrains Q2 2020).

Additional resources


SourceThis report was generated using AI

Related YouTrack vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-86497MEDIUM6.8
  • YouTrack logoYouTrack
  • cpe:2.3:a:jetbrains:youtrack
NoYesSep 07, 2026
CVE-2026-86495MEDIUM6.5
  • YouTrack logoYouTrack
  • cpe:2.3:a:jetbrains:youtrack
NoYesSep 07, 2026
CVE-2026-86500MEDIUM5.5
  • YouTrack logoYouTrack
  • cpe:2.3:a:jetbrains:youtrack
NoYesSep 07, 2026
CVE-2026-86499MEDIUM4.3
  • YouTrack logoYouTrack
  • cpe:2.3:a:jetbrains:youtrack
NoYesSep 07, 2026
CVE-2026-86496MEDIUM4.3
  • YouTrack logoYouTrack
  • cpe:2.3:a:jetbrains:youtrack
NoYesSep 07, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management