Code Execution Vulnerability in JetBrains IntelliJ IDEA Untrusted Project Mode
CVE-2023-51655

6.3MEDIUM

Key Information:

Vendor
JetBrains
Status
IntelliJ IDEA
Vendor
CVE Published:
21 December 2023

Summary

In JetBrains IntelliJ IDEA versions prior to 2023.3.2, a code execution vulnerability exists within the Untrusted Project mode. This issue allows attackers to exploit a malicious plugin repository configured in the project settings, potentially leading to arbitrary code execution. Users are advised to upgrade to the latest version to mitigate this security risk.

Affected Version(s)

IntelliJ IDEA 0 < 2023.3.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.