Medium WID-SEC-2024-0313 2 CVEs

JetBrains IntelliJ IDEA: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Feb 6, 2024 · Updated Feb 6, 2024 · de-DE

Vendor: JetBrains Product: IntelliJ IDEA Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um Dateien zu manipulieren.

Product

IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).

Vulnerabilities 2

Medium 6.1

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an …

JetBrains IntelliJ IDEA

Feb 6, 2024
Low 2.8

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives

JetBrains IntelliJ IDEA

Feb 6, 2024

Revision history

2024-02-06 #1
Initiale Fassung

References

JetBrainsFixed security issues vom 2024-02-06
https://www.jetbrains.com/privacy-security/issues-fixed/
GitHub Advisory Database vom 2024-02-06
https://github.com/advisories/GHSA-3wxq-76w9-ghcp
GitHub Advisory Database vom 2024-02-06
https://github.com/advisories/GHSA-pmvf-52m5-fj89