Jetbrains Intellij Idea vulnerabilities, page 2
82 vulnerabilities
Known vulnerabilities in Jetbrains Intellij Idea, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-48431jetbrainsintellij_idea
EPSS score0.10%
In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.CVE-2022-48432jetbrainsintellij_ideaEPSS score0.15%
In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.CVE-2022-48430jetbrainsintellij_ideaEPSS score0.33%
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.CVE-2022-48433jetbrainsintellij_ideaEPSS score0.65%
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.CVE-2022-37009jetbrainsintellij_ideaEPSS score0.25%
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possibleCVE-2022-37010jetbrainsintellij_ideaEPSS score0.18%
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missedCVE-2022-29815jetbrainsintellij_ideaEPSS score0.22%
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleCVE-2022-29814jetbrainsintellij_ideaEPSS score0.23%
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possibleCVE-2022-29818jetbrainsintellij_ideaEPSS score0.15%
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawedCVE-2022-29816jetbrainsintellij_ideaEPSS score0.27%
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possibleCVE-2022-29819jetbrainsintellij_ideaEPSS score0.23%
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possibleCVE-2022-29812jetbrainsintellij_ideaEPSS score0.18%
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficientCVE-2022-29813jetbrainsintellij_ideaEPSS score0.22%
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possibleCVE-2022-29817jetbrainsintellij_ideaEPSS score0.39%
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possibleCVE-2022-46824jetbrainsintellij_ideaEPSS score0.18%
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.CVE-2022-46825jetbrainsintellij_ideaEPSS score0.13%
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.CVE-2022-46828jetbrainsintellij_ideaEPSS score0.28%
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.CVE-2022-46826jetbrainsintellij_ideaEPSS score0.23%
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.CVE-2022-46827jetbrainsintellij_ideaEPSS score0.20%
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.CVE-2022-24345jetbrainsintellij_ideaEPSS score0.39%
In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project was possible.