CVE-2022-48433 - In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server

HIGH

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server

Published Mar 29, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.65%

In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<2023.1

No remediation recorded yet.

0.65% 0.00646

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00646

2023-2026

Table of values (8 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.65% (0.00646)	49.17th	v5 (v2026.06.15)
Jun 15, 2026	0.65% (0.00646)	45.94th	v5 (v2026.06.15)
Mar 17, 2025	0.00% (0.00003)	0.13th	v4 (v2025.03.14)
Dec 12, 2024	0.15% (0.00150)	52.56th	v3 (v2023.03.01)
Apr 4, 2024	0.13% (0.00132)	47.62th	v3 (v2023.03.01)
Feb 27, 2024	0.09% (0.00094)	38.44th	v3 (v2023.03.01)
Apr 1, 2023	0.09% (0.00087)	35.38th	v3 (v2023.03.01)
Mar 30, 2023	0.04% (0.00043)	7.02th	v3 (v2023.03.01)