CVE-2020-7914 - In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network

Back Back to CVE browser

HIGH

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network

Published Jan 31, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.89%

Description

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://blog.jetbrains.com
x_refsource_MISCVendor Advisory
https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28846
Advisory

Link	Providers	Tags
https://blog.jetbrains.com		x_refsource_MISCVendor Advisory
https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28846		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 31, 2020

Updated Aug 4, 2024

Reserved Jan 22, 2020

Link CVE-2020-7914

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7914

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 31, 2020

Updated Aug 4, 2024

Link EUVD-2020-28846

GitHub

No data