PT-2025-12800 · Jetbrains · Goland

Published 2025-03-25 · Updated 2025-09-30 · CVE-2025-29932

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2025.1

Description The issue concerns an XXE (XML External Entity) vulnerability that occurs during debugging. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world incidents.

Recommendations For versions prior to 2025.1, update to version 2025.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of XML external entity references during debugging until a patch is available.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-11458

CVE-2025-29932

Affected Products

Goland

References · 10

• https://bdu.fstec.ru/vul/2025-11458 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-29932 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29932 · Vendor Advisory
• https://t.me/cvetracker/19884 · Telegram Post
• https://twitter.com/CVEnew/status/1904519264192930061 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1904540390906077186 · Twitter Post
• https://t.me/cvedetector/21092 · Telegram Post
• https://jetbrains.com/privacy-security/issues-fixed · Note
• https://vuldb.com/?id.301244 · Note
• https://t.me/cveNotify/137020 · Telegram Post