What happened On October 18th, 2018 at mid-day we became aware of a security vulnerability in YouTrack InCloud and Standalone instances in which the guest user was banned. This security breach affected YouTrack instances starting from version 2018.1 through version 2018.3.46581 where the issue was fixed. (more…)

As you may already know, a security vulnerability was found in the YouTrack Workflow Editor. Here is a detailed overview of what happened. What happened On March 7, 2017, we discovered a security issue in the YouTrack Workflow Editor. When using your YouTrack credentials or JetBrains Account credentials to submit an exception report from inside the Workflow Editor (anonymous reports would not be affected by this), or authorise the Workflow Editor to connect to your YouTrack instance, the supplied credentials would be stored in the user directory in unencrypted format. While this does not p