CVE-2020-29582: JetBrains Kotlin

Medium severity, CVSS 5.3. EPSS: 2.6% chance of exploitation in the next 30 days.

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Affected products

• JetBrains Kotlin: before 2.1.0 (fixed in 2.1.0)
• Oracle Communications Cloud Native Core Network Slice Selection Function: version 1.2.1 only
• Oracle Communications Cloud Native Core Policy: version 1.14.0 only
• Oracle Communications Cloud Native Core Service Communication Proxy: version 1.14.0 only

Published 2021-02-03. Last modified 2026-06-17.