Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-23385

Quick assessment

Affected
JetBrains ReSharper
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

JetBrains Rider等都是捷克JetBrains公司的产品。JetBrains Rider是一套跨平台的.NET集成开发环境（IDE）。JetBrains ReSharper是一款用于.NET开发的Visual Studio扩展程序。JetBrains dotTrace是一款专业的 .NET 性能分析工具，主要用于检测和分析 .NET 和 .NET Core 应用程序的性能瓶颈。 JetBrains多款产品存在安全漏洞。攻击者利用该漏洞可以提升权限。以下产品受到影响：ReSharper、Ride

CVSS 7.8 · High EPSS 0.14% · P3

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-23385

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
流程控制
Source: CVE Program / CVE List V5
Vulnerability Title
JetBrains多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
JetBrains Rider等都是捷克JetBrains公司的产品。JetBrains Rider是一套跨平台的.NET集成开发环境（IDE）。JetBrains ReSharper是一款用于.NET开发的Visual Studio扩展程序。JetBrains dotTrace是一款专业的 .NET 性能分析工具，主要用于检测和分析 .NET 和 .NET Core 应用程序的性能瓶颈。 JetBrains多款产品存在安全漏洞。攻击者利用该漏洞可以提升权限。以下产品受到影响：ReSharper、Ride
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
JetBrains ReSharper 2024.3 ~ 2024.3.4 -
JetBrains Rider 2024.3 ~ 2024.3.4 -
JetBrains dotTrace 2024.3 ~ 2024.3.4 -
JetBrains ETW Host Service 0 ~ 16.43 -

II. Public POCs for CVE-2025-23385

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-23385

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: ReSharper
Same vendor: JetBrains
Same weakness: CWE-114

V. Comments for CVE-2025-23385

No comments yet

Leave a comment