CVE-2025-58335CWE-356
CVE-2025-58335
Medium · published August 28, 2025
What it is
In JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.284.50,
243.284.54,
243.284.50 information disclosure was possible via search_project function
The record
Technical detail
- CVSS v3.1
- 5.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00217 · 11.5th percentile
- Weakness
- CWE-356 · Product UI does not Warn User of Unsafe Actions
- Published
- 2025-08-28T21:15Z
Affected products (3)
| Product | Versions | Fixed in |
|---|
| jetbrains/junie | < 243.284.50 | 243.284.50 |
| jetbrains/junie | ≥ 251.72.165, < 251.284.50 | 251.284.50 |
| jetbrains/junie | ≥ 252.204.139, < 252.284.50 | 252.284.50 |
References (1)
EPSS history
Timeline
28 AUG 16:48Z
In JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.284.50,
243.284.54,
24…
cvelistv5