Latest medium severity vulnerabilities for "jetbrains intellij idea"

Where

AND

Sort:

JetBrains IntelliJ IDEAIn JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log

Risk 36

Severity

6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log

First published (updated )

CVE-2026-75057

JetBrains IntelliJ IDEAXEE

Risk 31

Severity

5.5

XEE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers

First published (updated )

CVE-2026-75058

JetBrains IntelliJ IDEASSRF

Risk 35

Severity

6.3

SSRF

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects

First published (updated )

CVE-2026-75054

JetBrains IntelliJ IDEAXEE

Risk 31

Severity

5.5

XEE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE

First published (updated )

CVE-2026-75055

JetBrains IntelliJ IDEASSRF

Risk 34

Severity

5.4

SSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint

First published (updated )

CVE-2026-75053

JetBrains IntelliJ IDEACommand Injection

Risk 28

Severity

4.4

Command Injection

AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects

First published (updated )

CVE-2026-75052

JetBrains IntelliJ IDEAXSS

Risk 38

Severity

6.1

XSS

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking

First published (updated )

CVE-2026-64810

JetBrains IntelliJ IDEAIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote pr…

Risk 34

Severity

5.4

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH

First published (updated )

CVE-2025-68269

JetBrains IntelliJ IDEAPath Traversal

Risk 16

Severity

4.3

EPSS

0.05%

Path Traversal

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives

First published (updated )

CVE-2024-24940

JetBrains IntelliJ IDEAInput Validation

Risk 27

Severity

6.1

EPSS

0.05%

Input Validation

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL

First published (updated )

CVE-2024-24941

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact