5 matches found
CVE-2022-47895
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files...
7.5CVSS6.9AI score0.0021EPSS
SaveExploits0References1
CVE-2022-47895
creationtimestamp| type| source ---|---|--- 2022-12-22 14:13:33+00:00| seen| https://t.me/cibsecurity/55111...
7.5CVSS7.3AI score0.0021EPSS
SaveExploits0References1
CVE-2022-47895
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files...
4.7CVSS7.1AI score0.0021EPSS
SaveExploits0References1
CVE-2022-47895
JetBrains IntelliJ IDEA before 2022.3.1 is affected by CVE-2022-47895 through the "Validate JSP File" action, which uses HTTP to download required JAR files. The underlying issue enables a scenario where an attacker could influence the download of JARs, potentially enabling exploitation via deser...
7.5CVSS7.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
20