CVE-2017-8316

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@checkpoint.com

Published

2018-08-03

Last modified

2024-09-16

Weaknesses

CWE-611

Affected products

• Intellij Idea (Jetbrains)

References

• http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b
• https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
• https://youtrack.jetbrains.com/issue/IDEA-175381