Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview...

Code injection

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server...

CVE-2022-48433

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server...

CVE-2022-48433

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server...

CVE-2022-48433

JetBrains IntelliJ IDEA prior to 2023.1 is affected: an API method in the built‑in web server could leak NTLM hashes. Root cause: NTLM hash leakage via a web server API. Impact: potential exposure of authentication material (Cn/a beyond what sources state); CVSS data indicates high confidentialit...

CVE-2022-48432

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed...

CVE-2022-48432

The CVE-2022-48432 issue affects JetBrains IntelliJ IDEA prior to 2023.1, where the bundled Chromium was not sandboxed. This vulnerability is described across multiple sources as a sandboxing weakness in the Chromium component integrated with IntelliJ IDEA, with potential impact to confidentialit...

CVE-2022-48432

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed...

CVE-2022-48431

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation...

CVE-2022-48431

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation...

CVE-2022-48431

JetBrains IntelliJ IDEA prior to 2023.1 is affected: importing Gradle and Maven projects could bypass theTrust Project confirmation, potentially allowing untrusted project data to be loaded. The issue is documented across multiple sources (NVD/Red Hat/NCSC) with consistent description. The practi...

CVE-2022-48430

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview...

CVE-2022-48430

In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview...

CVE-2022-48430

Vulnerability CVE-2022-48430 affects JetBrains IntelliJ IDEA prior to 2023.1. The issue allows disclosing file content via an external stylesheet path used in Markdown preview, due to the way the preview handles stylesheet references. Impact: potential exposure of local file contents (confidentia...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.1, which stems from the possibility that NTLM hashes could be leaked through API method...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.1, which stems from an un-sandboxed bundled version of Chromium...

PT-2023-15776 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.1 Description: The issue concerns the bundled version of Chromium in JetBrains IntelliJ IDEA, which was not sandboxed. This lack of sandboxing could potentially lead to security issues...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.1, which stems from a file content that can lead to path disclosure via an external...

JetBrains IntelliJ IDEA 数据伪造问题漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.1, which stems from the ability to import Gradle and Maven projects without confirming...

PT-2023-15774 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.1 Description: The issue allows file content to be disclosed via an external stylesheet path in Markdown preview. Recommendations: For versions prior to 2023.1, update to version 2023.1 or later ...