Medium WID-SEC-2023-0800 4 CVEs

JetBrains IntelliJ IDEA: Mehrere Schwachstellen

Published Mar 29, 2023 · Updated Mar 29, 2023 · de-DE

Vendor: JetBrains Product: IntelliJ IDEA < 2023.1 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).

Vulnerabilities 4

Medium 6.1

CVE-2022-48433

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built…

JetBrains IntelliJ IDEA

Mar 29, 2023
Medium 5.5

CVE-2022-48430

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown pr…

JetBrains IntelliJ IDEA

Mar 29, 2023
Medium 5.2

CVE-2022-48432

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.

JetBrains IntelliJ IDEA

Mar 29, 2023
Medium 4.5

CVE-2022-48431

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust …

JetBrains IntelliJ IDEA

Mar 29, 2023

Revision history

2023-03-29 #1
Initiale Fassung

References

JetBrains Release Notes vom 2023-03-29
https://www.jetbrains.com/privacy-security/issues-fixed/