Lucene search

JetBrainsCVELIST:CVE-2022-47896

HistoryDec 22, 2022 - 10:25 a.m.

CVE-2022-47896

2022-12-2210:25:44

JetBrains

www.cve.org

jetbrains

intellij idea

ssti

vulnerability

code templates

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

12.9%

JSON

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.

CNA Affected

[
  {
    "vendor": "JetBrains",
    "product": "IntelliJ IDEA",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2022.3.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.jetbrains.com/privacy-security/issues-fixed/

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

12.9%

JSON

Related for CVELIST:CVE-2022-47896