CVE-2022-48435

In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file...

PT-2023-15778 · Jetbrains · Phpstorm

Name of the Vulnerable Software and Affected Versions: JetBrains PhpStorm versions prior to 2023.1 Description: The issue allows source code to be logged in the local idea.log file. Recommendations: For versions prior to 2023.1, update to version 2023.1 or later to resolve the issue...

JetBrains PhpStorm 日志信息泄露漏洞

JetBrains PhpStorm is an application from the Czech company JetBrains. It provides an application for writing code. A log information disclosure vulnerability exists in JetBrains PhpStorm versions prior to 2023.1, which stems from the fact that code can be logged locally in the idea.log file...

CVE-2021-45977

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC used as...

CVE-2021-45977

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC used as...

CVE-2021-45977

CVE-2021-45977 affects JetBrains IDEs used as Remote Development backends where the affected products bound to the 0.0.0.0 address. The vulnerability description from connected sources notes exposure of the backend service due to binding to an all interfaces address. Fixed versions are provided: ...

Security update for php-composer (important)

openSUSE Security Update: Security update for php-composer Announcement ID: openSUSE-SU-2021:1289-1 Rating: important References: 1185376 1187416 Cross-References: CVE-2021-29472 CVSS scores: CVE-2021-29472 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

Code injection

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

CVE-2021-25764

PhpStorm (JetBrains) before 2020.3 is affected: the issue lets source code be written into debug logs (“Source code could be added to debug logs”). The vulnerability affects PhpStorm’s logging path and can lead to information disclosure via logs. The issue is tracked as CVE-2021-25764. Remediatio...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

JetBrains PhpStorm 安全漏洞

JetBrains PhpStorm is an application from the Czech JetBrains company. It provides an application for writing code. A security vulnerability exists in JetBrains PhpStorm before 2020.3, which originates from code that can be added to the debug log...

YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure

Exploit Title : YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/04/2019 Vendor Homepage : jetbrains.com - yiiframework.com Software Download Link : github.com/johannesMatevosyan/yii-cms/archive/master.zip...

Integrate Security Testing into PhpStorm

New State-of-the-Art Reduces Costs Typically, application security testing is performed after the source code was already committed to the source code repository. For example, a security scan is manually performed before deployment, or continuous integration is used that automatically tests the...