CVE-2020-7914: High severity JetBrains IntelliJ IDEA vulnerability
Published Jan 31, 2020
·Updated
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
Affected Software
1 affected component
JetBrains IntelliJ IDEA<2019.3.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JetBrains IntelliJ IDEAto a version that resolves this vulnerability.Fixed in 2019.3
Event History
Jan 31, 2020
CVE Published
via MITRE·12:02 PM
Data Sourced
via MITRE·12:02 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-7914.
2
What is the severity of CVE-2020-7914?
The severity of CVE-2020-7914 is high, with a severity value of 7.5.
3
What software is affected by CVE-2020-7914?
JetBrains IntelliJ IDEA version up to 2019.3.0 is affected by CVE-2020-7914.
4
What is the impact of CVE-2020-7914?
CVE-2020-7914 allows arbitrary file read operations over the network.
5
Has CVE-2020-7914 been fixed?
Yes, CVE-2020-7914 has been fixed in JetBrains IntelliJ IDEA version 2019.3.