Vulnerabilities > CVE-2018-14878 - Deserialization of Untrusted Data vulnerability in Jetbrains Dotpeek and Resharper Ultimate

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data.

Vulnerable Configurations

Part Description Count
Application
Jetbrains
52

Common Weakness Enumeration (CWE)