Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs.
AnalysisAI
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. Affected products include: Jetbrains Phpstorm. Version information: before 2020.3.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run attacker-controlled code
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run code through project tool
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today