Toolbox App (Jetbrains) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-04-17. Vendor: Jetbrains.

CVEs of Toolbox App

• CVE-2025-43014 - CVSS 6.5 (medium), 2025-04-17: In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation
• CVE-2025-42921 - CVSS 6.5 (medium), 2025-04-17: In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin
• CVE-2025-43013 - CVSS 7.5 (high), 2025-04-17: In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible
• CVE-2025-43012 - CVSS 9.8 (critical), 2025-04-17: In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible
• CVE-2024-24943 - CVSS 5.5 (medium), 2024-02-06: In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image
• CVE-2022-48481 - CVSS 7.8 (high), 2023-04-28: In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible