jetbrains intellij idea vulnerabilities and exploits

(subscribe to this query)

In JetBrains IntelliJ IDEA prior to 2022.1 local code execution via custom Pandoc path was possible

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2022.1 local code execution via links in Quick Documentation was possible

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2020.2, HTTP links were used for several remote repositories instead of HTTPS.

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.

Jetbrains Intellij Idea

In JetBrains IntelliJ IDEA prior to 2024.1 hTML injection via the project name was possible

Jetbrains Intellij Idea

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018....

Jetbrains Intellij Idea

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configur...

Jetbrains Intellij Idea

« PREV 1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook