CVE-2021-31897

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

CVE-2021-31898

In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS...

EUVD-2021-18772

Malware in sbrugna...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

JetBrains WebStorm Installed (Linux)

Binary data jetbrainswebstormnixinstalled.nbin...

JetBrains WebStorm Installed (Mac OS X)

Binary data jetbrainswebstormmacosinstalled.nbin...

JetBrains webstorm code execution vulnerability

JetBrains webstorm is an integrated development environment IDE for JavaScript and TypeScript development. A code execution vulnerability exists in JetBrains webstorm, which originates from installer scripts via type definition, and can be exploited by an attacker to execute code in untrusted...

JetBrains WebStorm < 2024.3 Code Execution

The version of JetBrains WebStorm installed on the remote host is prior to 2024.3 . It is, therefore, affected by a code execution vulnerability as referenced in the vendor advisory. Code Execution can occur in Untrusted Project mode via specifically constructed type definitions in the installer...

JetBrains WebStorm Installed (Windows)

Binary data jetbrainswebstormwininstalled.nbin...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

CVE-2024-52555

CVE-2024-52555 affects JetBrains WebStorm prior to 2024.3. Multiple connected sources confirm a code execution vulnerability in Untrusted Project mode via the type definitions installer script. The core issue is the installer script handling untrusted type definitions that can be loaded in Untrus...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

CVE-2024-52555

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...

JetBrains WebStorm 安全漏洞

JetBrains webstorm is an integrated development environment IDE for JavaScript and TypeScript development. A code execution vulnerability exists in JetBrains webstorm, which originates from installer scripts via type definition, and can be exploited by an attacker to execute code in untrusted...

PT-2024-9030 · Jetbrains · Webstorm

Name of the Vulnerable Software and Affected Versions: JetBrains WebStorm versions prior to 2024.3 Description: The issue in JetBrains WebStorm is related to the Untrusted Project Mode, where a flaw allows the loading of external untrusted data alongside trusted data. This can enable an attacker ...

CVE-2024-37051

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5,...

JetBrains Multiple IDE Security Vulnerabilities

JetBrains IntelliJ IDEA and others are products of the Czech company JetBrains.JetBrains IntelliJ IDEA is a set of integrated development environments IDEs for the Java language.JetBrains PyCharm is an integrated development environment IDE for the Python language. JetBrains PhpStorm is a softwar...

CVE-2021-45977

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC used as...

CVE-2021-45977

CVE-2021-45977 affects JetBrains IDEs used as Remote Development backends where the affected products bound to the 0.0.0.0 address. The vulnerability description from connected sources notes exposure of the backend service due to binding to an all interfaces address. Fixed versions are provided: ...