CVE-2026-123323
HIGH
NVD
CVSS Score
8.4
Severity
HIGH
Published
Nov 06, 2026
Vendor
unknown
Description
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation