CVE Feed

    Dashboard / CVE / CVE-2022-48435

    CVE-2022-48435

    In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file

    Published:Apr 4, 2023
    Last Modified:Feb 11, 2025
    EPS:Apr 4, 2023
    EPSS Score:0.00001
    CVSS Score:3.3

    Affected Products

    Vendor
    Jetbrains
    Product
    Phpstorm

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-215 Fuzzing for application mapping

    Related CVEs

    CVE-2026-123858 (CVSS 4.4) — In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from …
    CVE-2026-123857 (CVSS 4.3) — In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection…
    CVE-2026-118696 (CVSS 8) — In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and …
    CVE-2026-64809 (CVSS 8.4) — In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via th…
    CVE-2026-64808 (CVSS 8.4) — In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via pr…
    CVE-2024-37051 (CVSS 9.3) — GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than…
    CVE-2021-45977 (CVSS 9.8) — JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand …
    CVE-2021-25764 (CVSS 5.3) — In JetBrains PhpStorm before 2020.3, source code could be added to debug logs.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-48435 — Jetbrains (Low 3.3) | CVE-DB