An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.Referenceshttps://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
