CVE-2023-51655

Details

In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration

Affected Packages

IntelliJ IDEA

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Fixed in:

2023.3.2

IntelliJ IDEA CE

macOS 14macOS 15macOS 26

Fixed in:

2023.3.2

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-51655

WEB

https://www.jetbrains.com/privacy-security/issues-fixed/