In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• jetbrains.com/privacy-security/issues-fixed Diğer

Kayıt geçmişi

1. 6 Kas 2026 19:10Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-123853In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled J…
• 7,0 CVE-2026-123849In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Wat…
• 7,4 CVE-2026-123848In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
• 5,3 CVE-2026-123847In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command co…
• 3,3 CVE-2026-123845In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
• 4,3 CVE-2026-123846In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation