Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains PhpStorm ausnutzen, um Informationen offenzulegen und Dateien zu manipulieren.
Product
PhpStorm ist eine Entwicklungsumgebung (IDE) für PHP.
Vulnerabilities 2
-
Medium 4.4
In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted…
-
Medium 4.3
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
Revision history
-
#1
Initiale Fassung
References
-
JetBrains Fixed security issues vom 2026-11-08
https://www.jetbrains.com/privacy-security/issues-fixed/
-
GitHub Security Advisory vom 2026-11-08
https://github.com/advisories/GHSA-3P5J-C8PM-39VQ
-
GitHub Security Advisory vom 2026-11-08
https://github.com/advisories/GHSA-X28H-QVQP-4H33