Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Rider
(Jetbrains)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 5 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-06-10 | CVE-2024-37051 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6,... | Aqua, Clion, Datagrip, Dataspell, Goland, Intellij_idea, Mps, Phpstorm, Pycharm, Rider, Rubymine, Rustrover, Webstorm | 7.5 | ||
| 2024-02-06 | CVE-2024-24939 | In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible | Rider | 5.3 | ||
| 2022-08-03 | CVE-2022-37396 | In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution | Rider | 7.8 | ||
| 2020-01-30 | CVE-2020-7906 | In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3. | Rider | N/A | ||
| 2019-10-01 | CVE-2019-14960 | JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file. | Rider | N/A |