Threats tagged 'ghsa-x28h-qvqp-4h33'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-123857In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection Medium4.32026-11-06GCVE DatabaseCVE-2026-123857 JetBrains PhpStorm versions prior to 2026.3 are affected by an XML External Entity (XXE) vulnerability that can be triggered in untrusted projects through PHPMD ruleset autodetection. This vulnerability allows an attacker to cause limited information disclosure via crafted XML input. The vulnerability has a medium severity rating with a CVSS score of 4.3. Report on CVE-2026-123857 Vulnerability CWE-611 #ghsa-x28h-qvqp-4h33	GCVE Database	2026-11-06

Page 1 of 1