Bug 2568170 (CVE-2026-123312)
| Summary: | CVE-2026-123312 IntelliJ IDEA: IntelliJ IDEA: Information disclosure via crafted annotations.xml files | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability-draft | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in IntelliJ IDEA. By convincing a user to index a project containing a crafted annotations.xml file, an attacker can trigger Server-Side Request Forgery (SSRF)—a vulnerability where an application is coerced into making unintended network requests. Successful exploitation may allow an attacker to probe internal network resources, leading to unauthorized information disclosure.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-06 14:32:56 UTC
|