Lucene search

JetBrainsCVELIST:CVE-2022-37010

HistoryJul 28, 2022 - 10:25 a.m.

CVE-2022-37010

2022-07-2810:25:16

CWE-20

JetBrains

www.cve.org

jetbrains

intellij idea

email validation

vulnerability

CVSS3

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

Percentile

12.6%

JSON

In JetBrains IntelliJ IDEA before 2022.2 email address validation in the “Git User Name Is Not Defined” dialog was missed

CNA Affected

[
  {
    "product": "IntelliJ IDEA",
    "vendor": "JetBrains",
    "versions": [
      {
        "lessThan": "2022.2",
        "status": "affected",
        "version": "2022.2",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jetbrains.com/privacy-security/issues-fixed/

CVSS3

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2022-37010