In JetBrains YouTrack prior to 2021.4.31698, a custom logo could be set by a user who has read-only permissions.
jetbrains youtrack