Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: JetBrains IntelliJ IDEA 2022.3 Clear all filters
TI-2022-23173 CVE-2022-46827 · GHSA-57f8-j9vv-vx4g

XML external entity injection in JetBrains IntelliJ IDEA

Priority LOW 24

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2022-12-08 Fixed in 2022.3 CWE-611
TI-2022-23172 CVE-2022-46826 · GHSA-62g3-rj3p-5vjw

Path traversal in JetBrains IntelliJ IDEA

Priority LOW 27

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00229 Published 2022-12-08 Fixed in 2022.3 CWE-35