2022-12-08 17:37:58
JetBrains
PUBLISHED
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.