Vulnerabilities > CVE-2018-14878 - Deserialization of Untrusted Data vulnerability in Jetbrains Dotpeek and Resharper Ultimate

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
jetbrains
CWE-502

Summary

JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data.

Vulnerable Configurations

Part Description Count
Application
Jetbrains
52

Common Weakness Enumeration (CWE)