CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-39261
https://notcve.org/view.php?id=CVE-2023-39261
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-250: Execution with Unnecessary Privileges •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38069
https://notcve.org/view.php?id=CVE-2023-38069
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48433
https://notcve.org/view.php?id=CVE-2022-48433
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-522: Insufficiently Protected Credentials •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48432
https://notcve.org/view.php?id=CVE-2022-48432
In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-1188: Initialization of a Resource with an Insecure Default •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48431
https://notcve.org/view.php?id=CVE-2022-48431
In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-345: Insufficient Verification of Data Authenticity •