CVE-2019-10103

JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2019-07-03

Last modified

2024-08-04

Weaknesses

CWE-311

Affected products

• Kotlin (Jetbrains)

References

• https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
• https://security.netapp.com/advisory/ntap-20230818-0012/