JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2022-20142)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in previous versions of JetBrains YouTrack 2021.4.36872, which stems from the lack of data validation filtering of user-supplied data and output by the application project icon. An attacker could use this vulnerability to execute JavaScript code on the client side.