CVE-2022-29817

JetBrains IntelliJ IDEA before 2022.1 is affected by a reflected XSS vulnerability in the internal web server, triggered by error messages. The issue allows execution of JavaScript on the client; CVSS context is provided in the sources, but the documents do not specify a patch version or remediat...

CVE-2022-29816

JetBrains IntelliJ IDEA prior to 2022.1 is affected by HTML injection into IDE messages. The issue arises from injecting HTML into the IDE’s message rendering, enabling potential HTML-based content exposure. Remediation is to upgrade to IntelliJ IDEA 2022.1 or later, where the fix is applied. Off...

CVE-2022-29816

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...

CVE-2022-29815

The CVE-2022-29815 entry covers a local code execution vulnerability in JetBrains IntelliJ IDEA prior to 2022.1, achievable via workspace settings. The affected software is JetBrains IntelliJ IDEA (pre-2022.1); the issue arises from how workspace settings are processed, enabling code execution on...

CVE-2022-29815

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...

CVE-2022-29814

CVE-2022-29814 affects JetBrains IntelliJ IDEA before 2022.1, enabling local code execution through HTML descriptions in custom JSON schemas. The vulnerability is described across multiple sources (NVD, Red Hat, CNVD, CVE records) with local exploit potential; no remediation or patch version is s...

CVE-2022-29814

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...

CVE-2022-29813

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...

CVE-2022-29813

JetBrains IntelliJ IDEA is affected by a local code execution vulnerability (CVE-2022-29813) due to a custom Pandoc path, allowing code execution on systems that run before version 2022.1. The connected documents confirm the issue but do not provide detailed technical steps, affected subcomponent...

CVE-2022-29812

CVE-2022-29812 affects JetBrains IntelliJ IDEA prior to version 2022.1, where the notification mechanism did not adequately warn users about the use of Unicode directionality formatting characters. The issue is described across multiple sources as a vulnerability in IntelliJ IDEA before 2022.1, w...

CVE-2022-29812

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...

Jetbrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 contain a code injection vulnerability that could be exploited to execute native code via HTML descriptions in custom JSON...

Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited by attackers to execute native code via workspace...

Jetbrains JetBrains IntelliJ IDEA 跨站脚本漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.A cross-site scripting vulnerability exists in versions prior to JetBrains IntelliJ IDEA 2022.1, which stems from an error message in the internal web server that lacks a...

CVE-2022-29818: Origin Validation Error

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29819: Improper Control of Generation of Code

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...

CVE-2022-29817: Improper Neutralization of Input During Web Page Generation

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

CVE-2022-29812: Improper Handling of Unicode Encoding

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...

Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains, a Czech company.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from the execution of native code via a link in Quick...

PT-2022-19849 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.1 Description: The issue allows HTML injection into IDE messages. Recommendations: For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...