JetBrains

WebStorm

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-52555

  • EPSS 0%
  • Published 15.11.2024 16:15:38
  • Last modified 31.01.2025 14:37:51

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script

7.5

CVE-2024-37051

  • EPSS 4.75%
  • Published 10.06.2024 16:15:16
  • Last modified 21.11.2024 09:23:06

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP...

9.8

CVE-2021-45977

  • EPSS 0.01%
  • Published 25.02.2022 15:15:09
  • Last modified 21.11.2024 06:33:24

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3....

9.8

CVE-2021-31897

  • EPSS 0.01%
  • Published 11.05.2021 13:15:12
  • Last modified 21.11.2024 06:06:27

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.

7.5

CVE-2021-31898

  • EPSS 0%
  • Published 11.05.2021 13:15:12
  • Last modified 21.11.2024 06:06:27

In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.