Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c445-694v-cp45

Опубликовано: 18 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 1
CVSS3: 3.3

Описание

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one.  We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one.  We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.

EPSS

Процентиль: 17%
0.00052
Низкий

1 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-20
CWE-862

Связанные уязвимости

CVSS3: 3.3
nvd
больше 1 года назад

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one.  We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.

EPSS

Процентиль: 17%
0.00052
Низкий

1 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-20
CWE-862