low · CVSS v3 2.7

CVE-2026-123292

In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid

Description

In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid

Scores

Severity
low
CVSS v2
3.3
CVSS v3
2.7
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-118187

The PublishPress Revisions plugin (before 4.3.1) fails to verify ownership when duplicating or revising posts, allowing users with contributor-level access to copy private or draft content from other users. This flaw enables unauthorized disclosure of content and potential manipulation of posts. It affects WordPress sites that use the plugin.

View analysis

low

CVE-2026-123300

In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings

View analysis

low

CVE-2026-123312

JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.4 are vulnerable to Server Side Request Forgery (SSRF) via annotations.xml files during indexing. Attackers can trigger outbound requests to internal services, potentially exposing internal network information. The flaw does not allow direct code execution or data modification.

View analysis