CVE-2022-46825

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...

CVE-2022-46824

In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...

Buffer overflow

In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible...

Open redirect

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...

Command injection

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...

Path traversal

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

CVE-2022-46828

JetBrains IntelliJ IDEA is affected up to version 2022.3 on macOS due to a DYLIB injection vulnerability. The issue affects the loader path of dynamic libraries and can lead to local exploitation with high impact (per NVD: CVSSv3.1 base score 7.8, local access, high confidentiality/integrity/avai...

CVE-2022-46827

The CVE-2022-46827 entry affects JetBrains IntelliJ IDEA prior to 2022.3. The vulnerability is an XXE that enables SSRF via requests to custom plugin repositories, exploiting a flaw in handling external repository requests. Impact is described as SSRF with partial guidance in some feeds; confiden...

CVE-2022-46827

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...

CVE-2022-46827

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible...

CVE-2022-46826

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...

CVE-2022-46826

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...

CVE-2022-46826

CVE-2022-46826 affects JetBrains IntelliJ IDEA before 2022.3, where the built-in web server permits reading arbitrary files via a path traversal vulnerability. The issue stems from the built-in web server, allowing local access (verification via multiple sources) and has a remediation path: updat...

CVE-2022-46825

CVE-2022-46825 affects JetBrains IntelliJ IDEA prior to 2022.3. The vulnerability is that the built-in web server leaks information about open projects. The issue is supported by multiple sources (NVD/Red Hat/CVE entries and PT Security) and the documented remediation is to update to IntelliJ IDE...

CVE-2022-46825

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...

CVE-2022-46825

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects...

CVE-2022-46824

CVE-2022-46824 affects JetBrains IntelliJ IDEA before 2022.2.4. A buffer overflow in the macOS fsnotifier daemon is the underlying issue, impacting the fsnotifier component on macOS. The available details indicate a local attack vector with high potential impact to confidentiality, integrity, and...