CVE-2020-7914 in IntelliJ IDEA

Resumen

por MITRE

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2020-01-22
• Moderación: aceptado
• Artículo: VDB-149603
• CPE: listo
• CWE: CWE-200 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00004
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7914
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7914
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7914/