Description

JetBrains MPS before 2019.2.2 exposed listening ports to the network.

Remediation

References

https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/

Related Vulnerabilities

CVE-2014-7810 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-jasper

CVE-2022-24697 Vulnerability in maven package org.apache.kylin:kylin-core-common

CVE-2020-27782 Vulnerability in maven package io.undertow:undertow-servlet

CVE-2018-14042 Vulnerability in npm package bootstrap

CVE-2020-7652 Vulnerability in npm package snyk-broker

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Vendor Advisory NVD-CWE-noinfo