Skip to contentJetbrains Intellij Idea vulnerabilities
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in...CVE-2026-493824.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCVE-2026-493678.0 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCVE-2026-493667.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1...CVE-2026-418827.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote...CVE-2025-682695.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCVE-2025-577305.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic...CVE-2025-577296.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to...CVE-2025-577286.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCVE-2025-577274.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log fileCVE-2025-320543.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possibleCVE-2024-469703.3 Low
- jetbrains aqua, clion, datagrip +10 more +12 moreGitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1...CVE-2024-37051Public exploit9.3 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an...CVE-2024-249416.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archivesCVE-2024-249402.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode...CVE-2023-516556.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissionsCVE-2023-392615.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain casesCVE-2023-380693.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in...CVE-2022-484336.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.CVE-2022-484325.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be...CVE-2022-484314.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external...CVE-2022-484305.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.CVE-2022-478965.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol...CVE-2022-478954.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.CVE-2022-468285.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom...CVE-2022-468273.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be...CVE-2022-468266.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open...CVE-2022-468254.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS...CVE-2022-468245.6 Medium
- jetbrains intellij ideaThe installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order...CVE-2022-409787.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not...CVE-2022-370103.6 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possibleCVE-2022-370093.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation...CVE-2022-298196.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawedCVE-2022-298183.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server...CVE-2022-298173.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possibleCVE-2022-298162.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleCVE-2022-298156.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom...CVE-2022-298146.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possibleCVE-2022-298136.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode...CVE-2022-298122.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fieldsCVE-2022-286518.4 High
- jetbrains clion, goland, intellij idea +4 more +6 moreJetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3...CVE-2021-459779.8 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override)...CVE-2022-243467.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user)...CVE-2022-243457.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.CVE-2021-305047.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient...CVE-2021-292637.8 High
- jetbrains intellij ideaIn IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.CVE-2021-300067.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace...CVE-2021-257587.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories...CVE-2021-257565.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about...CVE-2020-276225.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted...CVE-2020-116909.8 Critical
- Show moreLoading…