JetBrains Kotlin Elevation of Privilege Vulnerability

JetBrains Kotlin is a statically typed programming language from the Czech company JetBrains that runs on the Java Virtual Machine. An elevation of privilege vulnerability exists in JetBrains Kotlin versions 1.4-M1 through 1.4-RC. No details of the vulnerability are provided at this time...

CVE-2020-15824

CVE-2020-15824 affects JetBrains Kotlin from 1.4-M1 to 1.4-RC, with Kotlin 1.3.7x unaffected. The issue is a script-cache privilege escalation caused by cached kotlin-main-kts scripts in the system temporary directory, which is shared by all users by default. The vulnerability is fixed in Kotlin ...