876 matches found
CVE-2022-29815: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...
CVE-2022-29814: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
CVE-2022-29816: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
Jetbrains JetBrains IntelliJ IDEA 访问控制错误漏洞
JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 are vulnerable to an access control error vulnerability that stems from a flaw in source checking in the internal web server...
JetBrains IntelliJ IDEA 代码注入漏洞
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited to execute native code via a custom Pandoc path...
Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains, a Czech company.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from the execution of native code via a link in Quick...
PT-2022-19849 · Jetbrains · Intellij Idea
Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.1 Description: The issue allows HTML injection into IDE messages. Recommendations: For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...
CVE-2022-29813: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...
idea-gb.com Cross Site Scripting vulnerability OBB-2498285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-28651
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...
CVE-2022-28651
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...
Code injection
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...
CVE-2022-28651
Vulnerability: JetBrains IntelliJ IDEA prior to 2021.3.3 allowed retrieving passwords from protected fields. Affected product/versions: IntelliJ IDEA before 2021.3.3. Root cause details are not specified in the provided documents. Impact: confidentiality of passwords may be exposed; CVSS data ind...
CVE-2022-28651
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...
CVE-2022-28651: Exposure of Sensitive System Information to an Unauthorized Control Sphere
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...
CVE-2022-27249
An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource...
CVE-2022-24346
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO Right-to-Left Override characters was possible...
CVE-2022-24346
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO Right-to-Left Override characters was possible...