Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Kotlin Number Of NVD 6 CRITICAL 0 HIGH 4 MEDIUM 2 LOW 0
URL https://kotlinlang.org/
Explanation Kotlin is a statically typed, object-oriented programming language developed by JetBrains.
The project was started in 2010 and the first official 1.0 release took place in February 2016.
The compiled source code runs on the Java VM, so existing Java assets can be used effectively.
Tag
  • オープンソース
  • Apache License v2.0

Add Information URL
No Type Name URL
1 https://blog.jetbrains.com/kotlin/
2 https://developer.android.com/kotlin?hl=ja
3 https://github.com/JetBrains/kotlin
4 https://blog.jetbrains.com/kotlin/category/releases/
5 https://github.com/JetBrains/kotlin/tree/master/license

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
1 Kotlin 1.9 1.9.20 Nov. 1, 2023 July 6, 2023 0 0 0 0
2 Kotlin 1.8 1.8.20 April 19, 2023 Jan. 12, 2023 0 0 0 0
3 Kotlin1.7 1.7.20 Sept. 29, 2022 July 9, 2022 0 0 0 0
4 Kotlin1.6 1.6.20 April 24, 2022 Nov. 16, 2021 0 0 0 0
5 Kotlin1.5 1.5.20 June 24, 2021 May 5, 2021 0 0 1 0
6 Kotlin1.4 1.4.20 Nov. 23, 2020 Aug. 17, 2020 0 1 2 0
7 Kotlin1.3 1.3.70 March 3, 2020 Oct. 29, 2018 0 3 2 0
8 Kotlin1.2 1.2.71 Sept. 25, 2018 Nov. 28, 2017 0 3 2 0
9 Kotlin1.1 1.1.60 Nov. 13, 2017 March 1, 2017 0 3 2 0
10 Kotlin0.9 0.9 0 3 2 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
1 5.3
5.0
MEDIUM
Network
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-24329 cpe:2.3:a:jetbrains:kotlin:*:* 1.6.0 2024-11-21 15:50
2022-02-26
Show GitHub Exploit DB Packet Storm
2 5.3
5.0
MEDIUM
Network
In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permis… CWE-276
Incorrect Default Permissions 
CVE-2020-29582 cpe:2.3:a:jetbrains:kotlin:*:* 1.4.21 2024-11-21 14:24
2021-02-4
Show GitHub Exploit DB Packet Storm
3 8.8
6.5
HIGH
Network
In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cac… CWE-269
 Improper Privilege Management
CVE-2020-15824 cpe:2.3:a:jetbrains:kotlin:1.4.0:rc
cpe:2.3:a:jetbrains:kotlin:1.4.0:milestone3
cpe:2.3:a:jetbrains:kotlin:1.4.0:…
2024-11-21 14:06
2020-08-9
Show GitHub Exploit DB Packet Storm
4 8.1
6.8
HIGH
Network
JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue… CWE-311
Missing Encryption of Sensitive Data
CVE-2019-10103 cpe:2.3:a:jetbrains:kotlin:*:* 1.3.30 2024-11-21 13:18
2019-07-4
Show GitHub Exploit DB Packet Storm
5 8.1
6.8
HIGH
Network
JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-10102 cpe:2.3:a:jetbrains:kotlin:*:* 1.3.30 2024-11-21 13:18
2019-07-4
Show GitHub Exploit DB Packet Storm
6 8.1
6.8
HIGH
Network
JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-10101 cpe:2.3:a:jetbrains:kotlin:*:* 1.3.30 2024-11-21 13:18
2019-07-4
Show GitHub Exploit DB Packet Storm