Lucene search
HistoryFeb 06, 2024 - 10:15 a.m.
CVE-2024-24941
jetbrains intellij idea
plugin
security issue
inappropriate url
authentication
jetbrains space
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
17.0%
In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL
Affected configurations
Node
jetbrainsintellij_ideaRange<2023.3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jetbrains | intellij_idea | * | cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2024-02-06 10:15:00
vulnrichment
vulnrichment
CVE-2024-24941
2024-02-06 09:21:30
cvelist
cvelist
CVE-2024-24941
2024-02-06 09:21:30
cve
cve
CVE-2024-24941
2024-02-06 10:15:11
nessus
nessus
JetBrains IntelliJ IDEA < 2023.3.3 Multiple Vulnerabilities (macOS)
2024-02-09 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2024-24941