CVE-2020-15823: 
YouTrack vulnerability analysis and mitigation

CVE-2020-15823 is a high severity vulnerability discovered in JetBrains YouTrack that allowed the disclosure of AWS metadata of a YouTrack InCloud instance via Server-Side Request Forgery (SSRF) in a workflow. The vulnerability was reported by security researcher Yurii Sanin and was fixed in YouTrack version 2020.2.8873 (JetBrains Security).

The vulnerability was classified as high severity and involved a Server-Side Request Forgery (SSRF) attack vector that could expose sensitive AWS metadata of YouTrack InCloud instances through workflow functionality (JetBrains Security).

The vulnerability could allow attackers to access sensitive AWS metadata of YouTrack InCloud instances, potentially compromising the security and privacy of the affected systems (JetBrains Security).

The vulnerability was exploitable through YouTrack's workflow functionality, requiring access to workflow features to execute the SSRF attack (JetBrains Security).

The vulnerability was patched in YouTrack version 2020.2.8873. Users are advised to upgrade to this version or later to protect against this security issue (JetBrains Security).