In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/ | vendor advisory |