Vulnerability Description
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jetbrains | Intellij Idea | < 2019.3.0 |
References
- https://blog.jetbrains.comVendor Advisory
- https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/Vendor Advisory
- https://blog.jetbrains.comVendor Advisory
- https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/Vendor Advisory
FAQ
What is CVE-2020-7914?
CVE-2020-7914 is a vulnerability with a CVSS score of 7.5 (HIGH). In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
How severe is CVE-2020-7914?
CVE-2020-7914 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7914?
Check the references section above for vendor advisories and patch information. Affected products include: Jetbrains Intellij Idea.