JetBrains Toolbox App command injection via enterprise configuration URLs
Toolbox apps using company settings addresses can let attackers run commands on your PC.
Summary
JetBrains Toolbox App allows command injection through enterprise configuration URLs. Versions before 3.6.1 are affected.
Affected when
- enterprise configuration URLs in use
What to do
Update to version 3.6.1 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen