CVE-2025-23385

High CVSS: 7.8

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Vendor

Jetbrains

Product

Dottrace

CWE

CWE-114

Yayın Tarihi

2025-01-28 16:15:41

Güncelleme

2026-01-12 18:53:54

Source Identifier

cve@jetbrains.com

KEV Date Added

Kategoriler

CWE-114 Dottrace HIGH Jetbrains 2025

Referanslar

https://www.jetbrains.com/privacy-security/issues-fixed/

Benzer Kayıtlar

Medium

CVE-2026-32745

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

Medium

CVE-2026-32229

In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled

Medium

CVE-2026-28195

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build confi…

Low

CVE-2026-28196

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk

High

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint

Medium

CVE-2026-28194

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow