CVE-2026-108474

Publié : 10 octobre 2026

Modifié : 10 octobre 2026

Lien officiel NVD

Score CVSS

9.8

CRITICAL

Description détaillée

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://www.jetbrains.com/privacy-security/issues-fixed/

Dernières Vulnérabilités

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

VOIR DÉTAILS

CVE-2026-18524

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

VOIR DÉTAILS

CVE-2026-16681

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

VOIR DÉTAILS