GCVE - cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jetbrains (`b1b7db7a-bd16-5477-8e89-fb64c5636fcd`)
Product	Webstorm (`9d7c5813-a0d4-561a-8bd5-431fe7452098`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-52555`	vulnerable	2026-06-03 14:57:30.611112	Details available MEDIUM (6.3) In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script Published: 2024-11-15T15:05:03.874Z Updated: 2024-11-15T18:56:12.581Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37051`	vulnerable	2026-06-03 14:56:05.579814	Details available CRITICAL (9.3) GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4 Published: 2024-06-10T15:58:06.021Z Updated: 2025-02-13T17:52:58.741Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/ https://security.netapp.com/advisory/ntap-20240705-0004/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31898`	vulnerable	2026-06-03 14:44:33.962650	Details available In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. Published: 2021-05-11T12:18:20.000Z Updated: 2024-08-03T23:10:30.734Z Open on db.gcve.eu Reference links https://blog.jetbrains.com https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31897`	vulnerable	2026-06-03 14:44:33.962206	Details available In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects. Published: 2021-05-11T12:19:47.000Z Updated: 2024-08-03T23:10:30.803Z Open on db.gcve.eu Reference links https://blog.jetbrains.com https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.