Lucene search
HistoryDec 08, 2022 - 6:15 p.m.
CVE-2022-46827
jetbrains
intellij idea
xxe attack
custom plugin repositories
ssrf
2022.3
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
12.7%
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
Affected configurations
Node
jetbrainsintellij_ideaRange<2022.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jetbrains | intellij_idea | * | cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-46827
2022-12-08 18:15:10
prion
prion
Design/Logic Flaw
2022-12-08 18:15:00
cvelist
cvelist
CVE-2022-46827
2022-12-08 17:37:58
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
12.7%
Related for NVD:CVE-2022-46827