Jetbrains Webstorm — known CVE vulnerabilities

Every CVE whose affected-product data names Jetbrains Webstorm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-31897 — CVSS 9.8 (critical): In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.
• CVE-2021-45977 — CVSS 9.8 (critical): JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1…
• CVE-2024-37051 — CVSS 9.3 (critical): GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7…
• CVE-2021-31898 — CVSS 7.5 (high): In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.
• CVE-2024-52555 — CVSS 6.3 (medium): In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script