CVE-2026-108474

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - cve@jetbrains.com

Published

2026-10-09

Last modified

2026-10-14

Weaknesses

CWE-89

Affected products

• Exposed (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/