Lucene search

K
cvelistJetBrainsCVELIST:CVE-2022-29819
HistoryApr 28, 2022 - 9:55 a.m.

CVE-2022-29819

2022-04-2809:55:28
CWE-94
JetBrains
www.cve.org
4
jetbrains intellij idea
code execution
vulnerability

CVSS3

6.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

EPSS

0

Percentile

5.1%

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible

CNA Affected

[
  {
    "product": "IntelliJ IDEA",
    "vendor": "JetBrains",
    "versions": [
      {
        "lessThan": "2022.1",
        "status": "affected",
        "version": "2022.1",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2022-29819