In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
CWE-200, CWE-326