Code Execution Vulnerability in JetBrains WebStorm Affects Untrusted Project Mode
CVE-2024-52555

7.8HIGH

Key Information:

Vendor
JetBrains
Status
WebStorm
Vendor
CVE Published:
15 November 2024

Summary

A code execution vulnerability in JetBrains WebStorm versions prior to 2024.3 allows malicious actors to execute arbitrary code in untrusted project mode through the type definitions installer script. This security flaw can potentially compromise the integrity of the development environment and lead to unauthorized access or data breaches. Users are advised to update to the latest version to mitigate this risk.

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.