CVE-2026-123312
Full vulnerability record from the local CVENow database.
Description
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
Severity
LOW
CVSS score
3.3
(v3.1)
Vulnerability status
Received
Source identifier
Published
2026-11-06 11:17:10.460000
Last modified
2026-11-06 11:17:10.460000
View original CVE JSON
{
"id": "CVE-2026-123312",
"sourceIdentifier": "[email protected]",
"published": "2026-11-06T11:17:10.460",
"lastModified": "2026-11-06T11:17:10.460",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In JetBrains IntelliJ IDEA before 2026.3, \n2026.2.4 sSRF was possible via annotations.xml files during indexing"
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "JetBrains",
"product": "IntelliJ IDEA",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "2026.3, \n2026.2.4",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-827"
}
]
}
],
"references": [
{
"url": "https://www.jetbrains.com/privacy-security/issues-fixed/",
"source": "[email protected]"
}
]
}