CVE-2022-24329

Medium

Description

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

SeverityMedium
CVSS5.3
Exploit probability—
ProductJetbrains Kotlin
PublishedFeb 25, 2022
First seenFeb 25, 2022

How to fix

Update
  • jetbrains kotlin1.6.0 or later
  • org.jetbrains.kotlin:kotlin-stdlib1.6.0 or later

Affected products

ProductAffected versionsFixed in
jetbrains kotlinv < 1.6.01.6.0
oracle communications_cloud_native_core_binding_support_function22.1.3—
oracle communications_pricing_design_center12.0.0.4, 12.0.0.5—
org.jetbrains.kotlin:kotlin-stdlibMavenv < 1.6.01.6.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-24329 · Jetbrains Kotlin · Dark Radar