HTML Injection Vulnerability in JetBrains IntelliJ IDEA Remote Development Feature
CVE-2025-57730

5.2MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
20 August 2025

What is CVE-2025-57730?

In JetBrains IntelliJ IDEA versions prior to 2025.2, an HTML injection vulnerability exists within the Remote Development feature. This security flaw can be exploited to manipulate web content in unexpected ways, potentially allowing an attacker to execute arbitrary HTML or JavaScript code. Users of affected versions should take immediate action to update their software to mitigate risks associated with this vulnerability and enhance their development environment's security.

Affected Version(s)

IntelliJ IDEA 0 < 2025.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.