CVE-2019-10103

2019-07-0320:15:11

Google

osv.dev

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.

CPENameOperatorVersion
kotlineqbuild-0.13.1357
kotlineqbuild-1.0.2-dev-302
kotlineqbuild-1.1.50-dev-1496
kotlineqbuild-1.2.50-dev-549
kotlineqbuild-0.8.605
kotlineqbuild-1.0.0-beta-4504
kotlineqbuild-1.3.30-dev-1476
kotlineqbuild-1.2.40-dev-394
kotlineqbuild-1.0.0-beta-5089
kotlineqbuild-0.7.79

Name	Operator	Version
kotlin	eq	build-0.13.1357
kotlin	eq	build-1.0.2-dev-302
kotlin	eq	build-1.1.50-dev-1496
kotlin	eq	build-1.2.50-dev-549
kotlin	eq	build-0.8.605
kotlin	eq	build-1.0.0-beta-4504
kotlin	eq	build-1.3.30-dev-1476
kotlin	eq	build-1.2.40-dev-394
kotlin	eq	build-1.0.0-beta-5089
kotlin	eq	build-0.7.79