In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• jetbrains.com/privacy-security/issues-fixed Diğer

Kayıt geçmişi

1. 6 Kas 2026 19:10Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-123853In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled J…
• 7,0 CVE-2026-123849In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Wat…
• 7,4 CVE-2026-123848In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
• 5,3 CVE-2026-123847In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command co…
• 3,3 CVE-2026-123845In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
• 4,3 CVE-2026-123846In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation