In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
CWE-522, CWE-522