Lucene search
JetBrainsCVELIST:CVE-2022-29815HistoryApr 28, 2022 - 9:55 a.m.
CVE-2022-29815
2022-04-2809:55:23
CWE-94
JetBrains
www.cve.org
5
jetbrains
intellij idea
local code execution
workspace settings
CVSS3
6.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
EPSS
0
Percentile
5.1%
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
CNA Affected
[
{
"product": "IntelliJ IDEA",
"vendor": "JetBrains",
"versions": [
{
"lessThan": "2022.1",
"status": "affected",
"version": "2022.1",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-29815
2022-04-28 10:15:08
nvd
nvd
CVE-2022-29815
2022-04-28 10:15:08
prion
prion
Code injection
2022-04-28 10:15:00
cnvd
cnvd
JetBrains IntelliJ IDEA Code Injection Vulnerability (CNVD-2022-55680)
2022-05-05 00:00:00
CVSS3
6.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-29815