high7.5
CVE-2017-8316
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both A…
Impact
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Intellij Idea | before 2017.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
- https://youtrack.jetbrains.com/issue/IDEA-175381
- http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b
- https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
- https://youtrack.jetbrains.com/issue/IDEA-175381