| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature | 5.2 |
Moyen |
||
| In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start | 7.3 |
Haute |
||
| In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files | 6.5 |
Moyen |
||
| In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference | 7.5 |
Haute |
||
| In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible | 6.1 |
Moyen |
||
| In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL | 6.1 |
Moyen |
||
| In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives | 4.3 |
Moyen |
||
| In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration | 9.8 |
Critique |
||
| In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions | 7.8 |
Haute |