CVE-2023-51655CWE-349

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project…

Medium · published December 21, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00334 · 25.6th percentile
Weakness
CWE-349 · Acceptance of Extraneous Untrusted Data With Trusted Data
Published
2023-12-21T09:57Z
EPSS history
Timeline
  • 21 DEC 09:57Z
    In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project…
    cvelistv5