In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 67.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 67.00 |
VPI formula vpi-v1