Vulnerabilities

TI-2022-24018 CVE-2022-48433 · GHSA-4jhx-8mmm-hp3c

Insufficiently protected credentials in JetBrains IntelliJ IDEA

LOW 34

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2023-03-29 Fixed in 2023.1 CWE-522

TI-2022-24017 CVE-2022-48432 · GHSA-hq22-5ff9-mv6w

LOW 37

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00155 Published 2023-03-29 Fixed in 2023.1 CWE-1188

TI-2022-24016 CVE-2022-48431 · GHSA-8fxh-vwx2-cpw9

LOW 33

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2023-03-29 Fixed in 2023.1 CWE-345

TI-2022-24015 CVE-2022-48430 · GHSA-65vc-vq9x-469r

LOW 33

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00329 Published 2023-03-29 Fixed in 2023.1 CWE-200