CVE-2021-31898

HIGH

JetBrains WebStorm < 2021.1 - Cleartext Transmission of Sensitive Information

Title source: llm

In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.

Core 2

Core References

Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0000

EPSS Percentile 0.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-319

Status published

Products (1)

jetbrains/webstorm < 2021.1

Published May 11, 2021

Tracked Since Feb 18, 2026