Information disclosure

In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

CVE-2021-30504 affects JetBrains IntelliJ IDEA prior to 2021.1. The issue is a Denial of Service caused by unbounded resource allocation, as described in multiple sources (NVD entry and cnvd/redhat/CVE listings). The Red Hat security entry and the JetBrains Security Bulletin Q1 2021 corroborate t...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-29263

CVE-2021-29263 affects JetBrains IntelliJ IDEA prior to 2020.3.3, where local code execution was possible due to insufficient checks when fetching a project from VCS. External Red Hat, CNVD, and CVE trackers corroborate the issue and its association to IntelliJ IDEA 2020.3.3. The JetBrains Securi...

CVE-2021-29263

In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS...

CVE-2021-30006

The CVE-2021-30006 issue affects JetBrains IntelliJ IDEA (before 2020.3.3) with an XXE vulnerability in the license server functionality that could lead to information disclosure. The JetBrains Security Bulletin Q1 2021 confirms IntelliJ IDEA XXE in the license server was resolved in 2020.3.3, mi...

CVE-2021-30006

In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure...

IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An external entity injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. An attacker can exploit this vulnerability to obtain information...

Jetbrains JetBrains IntelliJ IDEA 安全漏洞

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains integrated development environment for the Java language . A local code execution vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. The vulnerability stems from an insufficient check when the VCS fetches the project...

Jetbrains JetBrains IntelliJ IDEA 资源管理错误漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

JetBrains IntelliJ IDEA Code Execution Vulnerability (CNVD-2021-09313)

Jetbrains IntelliJ IDEA is a Czech JetBrains Jetbrains company's set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3. The vulnerability stems from a workspace model where deserialization could lead t...

Unspecified Vulnerability in JetBrains IntelliJ IDEA

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains Jetbrains company's set of integrated development environment for the Java language. A security vulnerability exists in Jetbrains JetBrains IntelliJ IDEA. The vulnerability stems from the software's use of http links for remote library storag...

CVE-2021-25756

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

CVE-2021-25756

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

Deserialization of untrusted data

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25758

CVE-2021-25758 affects JetBrains IntelliJ IDEA prior to 2020.3, where the workspace model could be deserialized insecurely, potentially enabling local code execution. The vulnerability is reported across multiple feeds (NVD/NVD mirrors, Red Hat CVE page, CNVD, CVE lists) and was addressed in JetB...