CVSS 3.1 Score 5.5 of 10 (medium)


Published Feb 6, 2024
Updated: Feb 9, 2024
CWE ID 400


CVE-2024-24943 is a vulnerability in JetBrains Toolbox App before version 2.2, which allows for a denial-of-service (DoS) attack through a malicious SVG image. This vulnerability affects multiple products, including gIdJC9, jE3QHw, gJPCJz, rH4Pyi, e2LuCA, bg7mCh, rH4Pyj, bg7mCi, rH4Pyg, rH4Pyh, bxhNKp, rH4Pym, bg7mCk, bg7mCl, rH4Pyk, rH4Pyl, e2LuB_, e2LuB-, bg7mCf, bhnOCG, and bhnOCH. The vulnerability has a base severity of MEDIUM and requires user interaction for exploitation. The impact score is 3.6 out of 10. It poses a potential danger to organizations as it can lead to resource exhaustion and cause a DoS situation in the affected products. It is recommended to update the JetBrains Toolbox App to version 2.2 or higher to remediate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.


Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2024-24943 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions