{"id":"CVE-2025-58335","title":"In JetBrains Junie before 252.284.66,\n251.284.66,\n243.284.66,\n252.284.61,\n251.284.61,\n243.284.61,\n252.284.50,\n252.284.54,\n251.284.54,\n251.284.50,\n243.284.54,\n243.284.50 information disclosure was possible via search_project function","summary":"In JetBrains Junie before 252.284.66,\n251.284.66,\n243.284.66,\n252.284.61,\n251.284.61,\n243.284.61,\n252.284.50,\n252.284.54,\n251.284.54,\n251.284.50,\n243.284.54,\n243.284.50 information disclosure was possible via search_project function","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","cwe":["CWE-356"],"vendor":"jetbrains","product":"junie","affected":["junie < 243.284.50","junie >= 251.72.165, < 251.284.50","junie >= 252.204.139, < 252.284.50"],"patched":["junie 252.284.50"],"published":"2025-08-28","updated":"2026-09-26","sourceUpdated":"2026-09-26T00:10:00.127","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58335","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com"}],"tags":["nvd"],"epss":0.00217,"epssPercentile":0.10811,"ingestedAt":"2026-09-26T00:22:39.890Z","slug":"CVE-2025-58335","body":"## Overview\n\nIn JetBrains Junie before 252.284.66,\n251.284.66,\n243.284.66,\n252.284.61,\n251.284.61,\n243.284.61,\n252.284.50,\n252.284.54,\n251.284.54,\n251.284.50,\n243.284.54,\n243.284.50 information disclosure was possible via search_project function\n\n## Affected\n\n- `junie < 243.284.50`\n- `junie >= 251.72.165, < 251.284.50`\n- `junie >= 252.204.139, < 252.284.50`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `junie 252.284.50`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}