Lucene search
HistoryFeb 06, 2024 - 10:15 a.m.
CVE-2024-24941
cve-2024-24941
jetbrains
intellij idea
plugin
authentication
token
url
security vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL
Affected configurations
Node
jetbrainsintellij_ideaRange<2023.3.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetbrains:intellij_idea | jetbrains intellij idea | lt | 2023.3.3 |
CNA Affected
[
{
"vendor": "JetBrains",
"product": "IntelliJ IDEA",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "2023.3.3",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Authentication flaw
2024-02-06 10:15:00
cvelist
cvelist
CVE-2024-24941
2024-02-06 09:21:30
nvd
nvd
CVE-2024-24941
2024-02-06 10:15:11
nessus
nessus
JetBrains IntelliJ IDEA < 2023.3.3 Multiple Vulnerabilities (macOS)
2024-02-09 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for CVE-2024-24941