ID:

CVE-2019-10103 (NVD)

- Vulnerability Info (edit)
2019-07-03

JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.

Products Kotlin
Type Improper Input Validation (CWE-20)
First patch - None (likely due to unavailable code)
Links https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
Annotation

Note:

No patch was assigned yet.