Low · 3.3 CVE-2024-46970 EUVD-2024-42169GHSA-jfw4-5phw-5pw7

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible

Published Sep 16, 2024 · Updated Sep 16, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: IntelliJ IDEA

Description

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible

Affected products

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2024.1	2024.1

Advisories 1

WID-SEC-2024-2150 JetBrains IntelliJ IDEA: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 16, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/