JetBrains IntelliJ IDEA < 2023.3.3 Multiple Vulnerabilities (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.3.3 It is, therefore, affected by multiple vulnerabilities: - Path traversal was possible when unpacking archives CVE-2024-24940 - A plugin for JetBrains Space was able to send an authentication token to an...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

Path traversal

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

Authentication flaw

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940

JetBrains IntelliJ IDEA prior to 2023.3.3 is affected by CVE-2024-24940, where path traversal is possible when unpacking archives. The issue arises in the Archive Extraction Handler component of the IDE. Red Hat and other sources confirm the vulnerability affects versions before 2023.3.3. Reporte...

CVE-2024-24941

The CVE-2024-24941 entry concerns JetBrains IntelliJ IDEA (pre-2023.3.3) with a Space plugin flaw where an authentication token could be sent to an inappropriate URL. Root cause cited in connected sources points to insufficient input validation/ mishandling in the authentication token logic. Repo...

JetBrains IntelliJ IDEA Security Vulnerability

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA prior to version 2023.3.3, which stems from the ability of a plug-in for JetBrains Space to send authenticatio...

PT-2024-1694 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue exists due to insufficient input validation in the authentication token handler component of the integrated development environment. This could allow a remote attacker ...

CVE-2024-24941: Improper Input Validation

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940: Relative Path Traversal

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

PT-2024-1695 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue is related to errors in handling relative paths to directories in the Archive Extraction Handler component of the IntelliJ IDEA integrated development environment...

JetBrains IntelliJ IDEA Security Vulnerability

JetBrains IntelliJ IDEA is an integrated development environment for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA prior to version 2023.3.3, which stems from path traversal when unpacking an archive...

JetBrains IntelliJ IDEA < 2023.2 Execution with Unnecessary Privileges (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.2 It is, therefore, affected by an execution with unnecessary privileges vulnerability, due to the bundled Space plugin requesting excessive permissions. An authenticated, local attacker could exploit this...

JetBrains IntelliJ IDEA < 2023.1.4 License Dialog Suppression (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.1.4 It is, therefore, affected by a license dialog suppression vulnerability, due to improper checking for an unspecified unusual condition. An authenticated, local attacker could exploit this vulnerability...

Audited Competitive conditionality loophole

Audited is Collective Idea open source an ORM extension . Used to record all changes to the model . Audited 4.0.0 to 5.3.3 before the version of a security vulnerability , the vulnerability stems from the existence of conditional competition vulnerability...