In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
References
Link | Resource |
---|---|
https://www.jetbrains.com/privacy-security/issues-fixed/ | Vendor Advisory |
Configurations
Information
Published : 2022-12-08 10:15
Updated : 2022-12-12 08:55
NVD link : CVE-2022-46826
Mitre link : CVE-2022-46826
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
jetbrains
- intellij_idea