CVE-2021-31905: 
YouTrack vulnerability analysis and mitigation

In JetBrains YouTrack before version 2020.6.8801, a security vulnerability was discovered that allowed information disclosure in an issue preview. The vulnerability was reported by Philip Wedemann and was assigned CVE-2021-31905. This issue affected YouTrack installations prior to the patched version (JetBrains Security Bulletin).

The vulnerability was classified with a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability could be exploited over the network, required low attack complexity, needed no privileges or user interaction, and could result in high confidentiality impact without affecting integrity or availability (NVD Database).

The vulnerability allowed unauthorized information disclosure through the issue preview functionality in YouTrack. The high CVSS score indicates that successful exploitation could lead to significant unauthorized access to sensitive information (JetBrains Security Bulletin).

The vulnerability could be exploited remotely without requiring any special privileges or user interaction, as indicated by the CVSS vector string parameters AV:N/AC:L/PR:N/UI:N (NVD Database).

The vulnerability was fixed in YouTrack version 2020.6.8801. Users running affected versions should upgrade to this version or later to mitigate the security risk (JetBrains Security Bulletin).