PT-2022-19850

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for reflected XSS via error messages in the internal web server. This means an attacker could potentially inject malicious code into the error messages, which would...

Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains, a Czech company.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from the execution of native code via a link in Quick...

Jetbrains JetBrains IntelliJ IDEA 跨站脚本漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.A cross-site scripting vulnerability exists in versions prior to JetBrains IntelliJ IDEA 2022.1, which stems from an error message in the internal web server that lacks a...

Jetbrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 contain a code injection vulnerability that could be exploited to execute native code via HTML descriptions in custom JSON...

JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited to execute native code via a custom Pandoc path...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Czech company Jetbrains. security vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from an insufficient notification mechanism for using Unicode...

PT-2022-19849 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.1 Description: The issue allows HTML injection into IDE messages. Recommendations: For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...

PT-2022-19847

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for local code execution via HTML descriptions in custom JSON schemas. Recommendations For versions prior to 2022.1, update to version 2022.1 or later to resolve the...

PT-2022-19848

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for local code execution via workspace settings. Recommendations For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...

PT-2022-19845

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The notification mechanisms in JetBrains IntelliJ IDEA about using Unicode directionality formatting characters were insufficient. Recommendations For versions prior to 2022.1, updat...

CVE-2022-29816: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...

PT-2022-19852

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for local code execution via links in Quick Documentation. This means that an attacker could potentially execute malicious code on a user's system by manipulating...

PT-2022-19846

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for local code execution via a custom Pandoc path. Recommendations For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...

Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited by attackers to execute native code via workspace...

idea-gb.com Cross Site Scripting vulnerability OBB-2498285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28651

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...

CVE-2022-28651

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...

Code injection

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...

CVE-2022-28651

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields...

CVE-2022-28651

Vulnerability: JetBrains IntelliJ IDEA prior to 2021.3.3 allowed retrieving passwords from protected fields. Affected product/versions: IntelliJ IDEA before 2021.3.3. Root cause details are not specified in the provided documents. Impact: confidentiality of passwords may be exposed; CVSS data ind...