IntelliJ IDEA < 2024.2.4 / 2024.3 (macOS)

The version of IntelliJ IDEA installed on the remote host is prior to 2024.2.4, 2024.3. It is, therefore, affected by a vulnerability as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file CVE-2025-32054 Note that Nessu...

The vulnerability of the IntelliJ IDEA integrated development environment, related to the disclosure of information in the log file, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the disclosure of information in the idea.log log file. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

CVE-2025-32054 affects JetBrains IntelliJ IDEA prior to 2024.3, including 2024.2.4. The issue is a logging vulnerability where source code could be written to the idea.log file, potentially exposing sensitive information. The root cause is that certain source code content is logged during normal ...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

PT-2025-14777 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2024.3 JetBrains IntelliJ IDEA version 2024.2.4 Description: The issue concerns the logging of source code in the idea.log file. Recommendations: For versions prior to 2024.3, update to version 2024.3...

JetBrains IntelliJ IDEA 日志信息泄露漏洞

JetBrains IntelliJ IDEA is a Czech JetBrains set of integrated development environment for the Java language . JetBrains IntelliJ IDEA suffers from a log information disclosure vulnerability that originates from code being logged in the idea.log file. An attacker could exploit this vulnerability ...

CVE-2022-28651

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

The vulnerability of the IntelliJ IDEA integrated development environment lies in its lack of protection for web page structures. This allows attackers to execute cross-site scripting attacks by modifying the project name.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow attackers to execute cross-site scripting attacks...

IntelliJ IDEA < 2024.1 HTML Injection

The version of IntelliJ IDEA installed on the remote host is prior to 2024.1. It is, therefore, affected by a vulnerability as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible CVE-2024-46970 Note that Nessus has not tested for...

CVE-2024-46970

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...

CVE-2024-46970

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...

CVE-2024-46970

JetBrains IntelliJ IDEA versions prior to 2024.1 are affected by a cross-site scripting risk due to HTML injection via the project name. The root cause is inadequate protection of the web page structure allowing HTML injection in the project name. Impact is described as HTML injection/XSS in mult...

CVE-2024-46970

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...

CVE-2024-46970

In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...

PT-2024-6311 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2024.1 Description: The issue is related to the lack of protection of the web page structure in the integrated development environment, allowing for HTML injection via the project name. This could...