← Back

CVE-2024-52555

nvd nist
Published: Nov 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script

Affected (1)

Products: Jetbrains: Webstorm
Jetbrains
1 product
Webstorm
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Webstorm
Before 2024.3.0

Related CWEs

CWE-349
Acceptance of Extraneous Untrusted Data With Trusted Data
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (1)

Source: cve@jetbrains.com
Vendor Advisory

Timeline

No history available yet.