High severity8.1NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026

CVE-2019-10101

Description

JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jetbrains/Kotlin2 versions
cpe:2.3:a:jetbrains:kotlin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:kotlin:*:*:*:*:*:*:*:*range: <1.3.30
- (no CPE)range: <1.3.30
JetBrains/Kotlindescription

Patches

Vulnerability mechanics

References

medium.com/bugbountywriteup/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fbnvdExploitThird Party Advisory
blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/nvdVendor Advisory
security.netapp.com/advisory/ntap-20230818-0012/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000