Show filters
51 Total Results
Displaying 11-20 of 51
Sort by:
Attacker Value
Unknown

CVE-2022-48430

Disclosure Date: March 29, 2023 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.
Attacker Value
Unknown

CVE-2022-47896

Disclosure Date: December 22, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
Attacker Value
Unknown

CVE-2022-47895

Disclosure Date: December 22, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.
Attacker Value
Unknown

CVE-2022-46828

Disclosure Date: December 08, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
Attacker Value
Unknown

CVE-2022-46827

Disclosure Date: December 08, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
Attacker Value
Unknown

CVE-2022-46826

Disclosure Date: December 08, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
Attacker Value
Unknown

CVE-2022-46825

Disclosure Date: December 08, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
Attacker Value
Unknown

CVE-2022-46824

Disclosure Date: December 08, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.
Attacker Value
Unknown

CVE-2022-40978

Disclosure Date: September 19, 2022 (last updated October 08, 2023)
The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking
Attacker Value
Unknown

CVE-2022-37010

Disclosure Date: July 28, 2022 (last updated October 08, 2023)
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed