Lucene search

K
nvd[email protected]NVD:CVE-2022-48431
HistoryMar 29, 2023 - 1:15 p.m.

CVE-2022-48431

2023-03-2913:15:07
CWE-345
web.nvd.nist.gov
2
jetbrains intellij idea
project import
gradle
maven
trust project
confirmation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.

Affected configurations

Nvd
Node
jetbrainsintellij_ideaRange<2023.1
VendorProductVersionCPE
jetbrainsintellij_idea*cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2022-48431