Vulnerabilidades en JetBrains
545 resultadosCVE-2026-123308MEDIUMIn JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projectsEPSS 0.1%CVE-2026-123311MEDIUMIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 command execution via a hidden run control in the Markdown preview was possibleEPSS 0.1%CVE-2026-103496MEDIUMIn JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notificationsEPSS 0.1%CVE-2026-49382MEDIUMIn JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright pluginEPSS 0.1%CVE-2025-23385HIGHIn JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 202EPSS 0.1%CVE-2026-111091HIGHIn JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configurationEPSS 0.1%CVE-2026-100256HIGHIn JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projectsEPSS 0.1%CVE-2022-46825MEDIUMIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.EPSS 0.1%CVE-2025-57729MEDIUMIn JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server startEPSS 0.1%CVE-2026-123833LOWIn JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projectsEPSS 0.1%CVE-2026-123278MEDIUMIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpointEPSS 0.1%CVE-2026-123277MEDIUMIn JetBrains CLion before 2026.3,
2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on LinuxEPSS 0.1%CVE-2025-57732HIGHIn JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipEPSS 0.1%CVE-2026-123312LOWIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 sSRF was possible via annotations.xml files during indexingEPSS 0.1%CVE-2026-32745MEDIUMIn JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsEPSS 0.1%CVE-2024-52555MEDIUMIn JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer scriptEPSS 0.1%CVE-2026-123313LOWIn JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settingsEPSS 0.1%CVE-2026-117530MEDIUMIn JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commandsEPSS 0.1%CVE-2026-49383LOWIn JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possibleEPSS 0.1%CVE-2025-68269MEDIUMIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSHEPSS 0.1%