JetBrains code with me vulnerabilities

Latest JetBrains code with me CVEs

Newest publication first

1. CVE-2021-31900 In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.

   Published 2021-05-11

   Medium·CVSS 5.3 EPSS 0.72%

   In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.

2. CVE-2021-31899 In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.

   Published 2021-05-11

   High·CVSS 8.8 EPSS 1.3%

   In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.

3. CVE-2021-25755 In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic.

   Published 2021-02-03

   Low·CVSS 2.5 EPSS 0.38%

   In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.