Lucene search

JetBrainsCVELIST:CVE-2022-29818

HistoryApr 28, 2022 - 9:55 a.m.

CVE-2022-29818

2022-04-2809:55:27

CWE-346

JetBrains

www.cve.org

jetbrains

intellij idea

origin checks

internal web server

CVSS3

3.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

7.2

Confidence

High

EPSS

Percentile

12.6%

JSON

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed

CNA Affected

[
  {
    "product": "IntelliJ IDEA",
    "vendor": "JetBrains",
    "versions": [
      {
        "lessThan": "2022.1",
        "status": "affected",
        "version": "2022.1",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jetbrains.com/privacy-security/issues-fixed/