Vulnerabilities

TI-2025-35626 CVE-2025-57730 · GHSA-rh25-hj2f-7r49

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature

LOW 26

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.00435 Published 2025-08-20 Fixed in 2025.2 CWE-80

TI-2025-35625 CVE-2025-57729 · GHSA-877r-cvgg-x7v6

LOW 33

In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00129 Published 2025-08-20 Fixed in 2025.2 CWE-829

TI-2025-35624 CVE-2025-57728 · GHSA-7r83-p869-7995

LOW 28

In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00247 Published 2025-08-20 Fixed in 2025.2 CWE-863

TI-2025-35623 CVE-2025-57727 · GHSA-gr4x-2wj5-g5m3

LOW 32

In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00196 Published 2025-08-20 Fixed in 2025.2 CWE-319