VDB
CVE-2024-5899
CVE-2024-5899
PUBLISHED
CVSS 1 LOW
When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one. We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.
EPSS 0.11% · 1.2th percentile
Risk Scores
CVSS 4.0
1
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS Score
0.11%
1.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| bazel_for_android_studio | 0 | |
| bazel_for_intellij | 0 | |
| BazelBuild | intellij plugin | 0 |
| bazel_for_clion | 0 |
Timeline
- Jun 18, 2024 CVE Published
- Jun 19, 2024 EPSS Score
- Jul 12, 2024 EPSS Score
- Aug 4, 2024 EPSS Score
- Aug 26, 2024 EPSS Score
- Sep 18, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 11, 2024 EPSS Score
- Nov 3, 2024 EPSS Score
- Nov 26, 2024 EPSS Score
- Dec 20, 2024 EPSS Score
- Jan 11, 2025 EPSS Score