Skip to contentJetbrains Intellij Idea vulnerabilities
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification,...CVE-2026-648104.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project...CVE-2026-597929.6 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possibleCVE-2026-493833.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in...CVE-2026-493824.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCVE-2026-493678.0 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCVE-2026-493667.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1...CVE-2026-418827.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote...CVE-2025-682695.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCVE-2025-577305.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic...CVE-2025-577296.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to...CVE-2025-577286.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCVE-2025-577274.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log fileCVE-2025-320543.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possibleCVE-2024-469703.3 Low
- jetbrains aqua, clion, datagrip +10 more +12 moreGitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1...CVE-2024-37051Public exploit9.3 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an...CVE-2024-249416.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archivesCVE-2024-249402.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode...CVE-2023-516556.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissionsCVE-2023-392615.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain casesCVE-2023-380693.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in...CVE-2022-484336.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.CVE-2022-484325.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be...CVE-2022-484314.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external...CVE-2022-484305.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.CVE-2022-478965.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol...CVE-2022-478954.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.CVE-2022-468285.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom...CVE-2022-468273.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be...CVE-2022-468266.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open...CVE-2022-468254.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS...CVE-2022-468245.6 Medium
- jetbrains intellij ideaThe installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order...CVE-2022-409787.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not...CVE-2022-370103.6 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possibleCVE-2022-370093.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation...CVE-2022-298196.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawedCVE-2022-298183.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server...CVE-2022-298173.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possibleCVE-2022-298162.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleCVE-2022-298156.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom...CVE-2022-298146.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possibleCVE-2022-298136.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode...CVE-2022-298122.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fieldsCVE-2022-286518.4 High
- jetbrains intellij ideaIntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can...CVE-2017-83167.5 High