CVE-2021-30006

The CVE-2021-30006 issue affects JetBrains IntelliJ IDEA (before 2020.3.3) with an XXE vulnerability in the license server functionality that could lead to information disclosure. The JetBrains Security Bulletin Q1 2021 confirms IntelliJ IDEA XXE in the license server was resolved in 2020.3.3, mi...

CVE-2021-29263: Undefined Security Weakness

In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS...

PT-2021-18568

Name of the Vulnerable Software and Affected Versions IntelliJ IDEA versions prior to 2020.3.3 Description The issue allows for XXE, which can lead to information disclosure. Recommendations For versions prior to 2020.3.3, update to version 2020.3.3 or later to resolve the issue...

PT-2021-18767

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2021.1 Description The issue allows for a Denial of Service DoS due to unbounded resource allocation. Recommendations For versions prior to 2021.1, update to version 2021.1 or later to resolve the issu...

CVE-2021-26309: Exposure of Resource to Wrong Sphere

Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions...

CVE-2021-26310: Undefined Security Weakness

In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible...

CVE-2021-30504: Uncontrolled Resource Consumption

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30006: Improper Restriction of XML External Entity Reference

In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure...

Jetbrains JetBrains IntelliJ IDEA 资源管理错误漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An external entity injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. An attacker can exploit this vulnerability to obtain information...

Jetbrains JetBrains IntelliJ IDEA 安全漏洞

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains integrated development environment for the Java language . A local code execution vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. The vulnerability stems from an insufficient check when the VCS fetches the project...

PT-2021-18154

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA version 2020.3.3 Description: The issue allowed for local code execution due to insufficient checks when getting the project from Version Control System VCS. Recommendations: For version 2020.3.3, update to a newer...

PT-2021-16997

Name of the Vulnerable Software and Affected Versions TeamCity IntelliJ plugin versions prior to 2020.2.2.85899 Description The issue allows for a Denial of Service DoS in the affected plugin. Recommendations For versions prior to 2020.2.2.85899, update to version 2020.2.2.85899 or later to resol...

PT-2021-16996

Name of the Vulnerable Software and Affected Versions TeamCity plugin for IntelliJ versions prior to 2020.2.2.85899 Description The issue allows for information disclosure due to insecure permissions on a local temporary file. Recommendations For versions prior to 2020.2.2.85899, update to versio...

Unspecified Vulnerability in JetBrains IntelliJ IDEA

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains Jetbrains company's set of integrated development environment for the Java language. A security vulnerability exists in Jetbrains JetBrains IntelliJ IDEA. The vulnerability stems from the software's use of http links for remote library storag...

JetBrains IntelliJ IDEA Code Execution Vulnerability (CNVD-2021-09313)

Jetbrains IntelliJ IDEA is a Czech JetBrains Jetbrains company's set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3. The vulnerability stems from a workspace model where deserialization could lead t...

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

CVE-2021-25756

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25756

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...