Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jetbrains intellij idea vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-46825
In JetBrains IntelliJ IDEA prior to 2022.3 the built-in web server leaked information about open projects.
Jetbrains Intellij Idea
NA
CVE-2022-46826
In JetBrains IntelliJ IDEA prior to 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
Jetbrains Intellij Idea
NA
CVE-2022-46827
In JetBrains IntelliJ IDEA prior to 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
Jetbrains Intellij Idea
NA
CVE-2023-51655
In JetBrains IntelliJ IDEA prior to 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration
Jetbrains Intellij Idea
7.5
CVSSv2
CVE-2019-9186
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote malicious users to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost inter...
Jetbrains Intellij Idea
4.6
CVSSv2
CVE-2019-18361
JetBrains IntelliJ IDEA prior to 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.
Jetbrains Intellij Idea
4.6
CVSSv2
CVE-2022-24346
In JetBrains IntelliJ IDEA prior to 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.
Jetbrains Intellij Idea
7.8
CVSSv2
CVE-2017-8316
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
Jetbrains Intellij Idea
NA
CVE-2022-48430
In JetBrains IntelliJ IDEA prior to 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.
Jetbrains Intellij Idea
NA
CVE-2022-48431
In JetBrains IntelliJ IDEA prior to 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.
Jetbrains Intellij Idea
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »