{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2023-51655", "assignerOrgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "state": "PUBLISHED", "assignerShortName": "JetBrains", "dateReserved": "2023-12-21T09:56:59.233Z", "datePublished": "2023-12-21T09:57:04.395Z", "dateUpdated": "2024-08-02T22:40:34.145Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "shortName": "JetBrains", "dateUpdated": "2023-12-21T09:57:04.395Z" }, "problemTypes": [ { "descriptions": [ { "lang": "en", "description": "CWE-349", "cweId": "CWE-349" } ] } ], "affected": [ { "vendor": "JetBrains", "product": "IntelliJ IDEA", "versions": [ { "version": "0", "status": "affected", "lessThan": "2023.3.2", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration" } ], "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/" } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" } } ] }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:40:34.145Z" }, "title": "CVE Program Container", "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "tags": [ "x_transferred" ] } ] } ] } }