In JetBrains IntelliJ IDEA before 2022.3.1 the Validate JSP File action used the HTTP protocol to download required JAR files.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intellij_idea | Jetbrains | * | 2022.3.1 (excluding) |