JetBrains Mps vulnerabilities

2 CVEs affecting JetBrains Mps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-37051, published 2024-06-10.

More from JetBrains.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-37051, published 2024-06-10. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion…
• CVE-2019-18362, published 2019-10-31. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. JetBrains MPS before 2019.2.2 exposed listening ports to the network.