What’s Vulnerable › Vulnerabilities

CVE-2017-8316

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-03 · updated 2026-06-17
• Weakness: CWE-611

Description

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.

Affected products

• JetBrains IntelliJ IDEA: before 2017.2.2 — fixed in 2017.2.2

How to fix

Upgrade to a fixed version: JetBrains IntelliJ IDEA 2017.2.2. Check the vendor advisory for mitigations.

References

• http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b
• https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
• https://youtrack.jetbrains.com/issue/IDEA-175381
• http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b88515513654e002cd51cbe8eb8226e96b
• https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/
• https://youtrack.jetbrains.com/issue/IDEA-175381

Get alerted when CVE-2017-8316 or the next vulnerability affects your stack