Description
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected products
- JetBrains / Datalore0 – 2026.1