Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Product
IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).
Vulnerabilities 5
-
Medium 6.2
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a p…
-
Medium 5.6
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
-
Medium 4.0
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
-
Low 3.9
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was p…
Revision history
-
#1
Initiale Fassung
References
-
JetBrains Security Bulletin vom 2022-12-08
https://www.jetbrains.com/privacy-security/issues-fixed/