First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-43013

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
JetBrains	Toolbox App	< 2.6

References

https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory

Timeline

Published: Apr 17, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-430146.5In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation CVE-2025-430156.5In JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces CVE-2025-430167.5In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session CVE-2025-430179.8HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to CVE-2025-430185.3Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address CVE-2025-430197.8A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via CVE-2025-43025.3The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. How CVE-2025-430206.8A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability CVE-2025-430215.7A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could al CVE-2025-430227.2A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability cou CVE-2025-430239.1A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerabi CVE-2025-430247.5A GUI dialog of an application allows to view what files are in the file system without proper authorization.

CVE-2025-43013: High severity, CVSS 7.5 | Vulnix