The vulnerability of the Authentication Token Handler component in the IntelliJ IDEA integrated development environment allows a attacker to send the authentication token to any arbitrary URL.

The vulnerability of the Authentication Token Handler component in the IntelliJ IDEA integrated development environment exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to send authentication tokens to any specified URL...

JetBrains IntelliJ IDEA < 2023.3.3 Multiple Vulnerabilities (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.3.3 It is, therefore, affected by multiple vulnerabilities: - Path traversal was possible when unpacking archives CVE-2024-24940 - A plugin for JetBrains Space was able to send an authentication token to an...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

Path traversal

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

Authentication flaw

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24940

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...

CVE-2024-24940

JetBrains IntelliJ IDEA prior to 2023.3.3 is affected by CVE-2024-24940, where path traversal is possible when unpacking archives. The issue arises in the Archive Extraction Handler component of the IDE. Red Hat and other sources confirm the vulnerability affects versions before 2023.3.3. Reporte...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

CVE-2024-24941

The CVE-2024-24941 entry concerns JetBrains IntelliJ IDEA (pre-2023.3.3) with a Space plugin flaw where an authentication token could be sent to an inappropriate URL. Root cause cited in connected sources points to insufficient input validation/ mishandling in the authentication token logic. Repo...

JetBrains IntelliJ IDEA Security Vulnerability

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA prior to version 2023.3.3, which stems from the ability of a plug-in for JetBrains Space to send authenticatio...

PT-2024-1694 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue exists due to insufficient input validation in the authentication token handler component of the integrated development environment. This could allow a remote attacker ...

PT-2024-1695 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue is related to errors in handling relative paths to directories in the Archive Extraction Handler component of the IntelliJ IDEA integrated development environment...

JetBrains IntelliJ IDEA Security Vulnerability

JetBrains IntelliJ IDEA is an integrated development environment for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA prior to version 2023.3.3, which stems from path traversal when unpacking an archive...

JetBrains IntelliJ IDEA < 2023.1.4 License Dialog Suppression (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.1.4 It is, therefore, affected by a license dialog suppression vulnerability, due to improper checking for an unspecified unusual condition. An authenticated, local attacker could exploit this vulnerability...

JetBrains IntelliJ IDEA < 2023.2 Execution with Unnecessary Privileges (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.2 It is, therefore, affected by an execution with unnecessary privileges vulnerability, due to the bundled Space plugin requesting excessive permissions. An authenticated, local attacker could exploit this...

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

CVE-2023-51655

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration...