CVE-2024-5899

Description

Improper trust check in Bazel Build intellij plugin in github.com/bazelbuild/intellij

How to fix CVE-2024-5899

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Go/github.com/bazelbuild/intellij—no fix listed

Is CVE-2024-5899 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0

References (3)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-5899
• WEBgithub.com/bazelbuild/intellij/releases/tag/v2024.06.04-aswb-stable
• WEBgithub.com/bazelbuild/intellij/security/advisories/GHSA-hh9f-wmhw-46vg