733 matches found
CVE-2022-29816
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
Design/Logic Flaw
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...
Code injection
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...
Code injection
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...
Code injection
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...
Code injection
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...
Hardcoded credentials
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
Design/Logic Flaw
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
CVE-2022-29819
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...
CVE-2022-29819
JetBrains IntelliJ IDEA prior to 2022.1 is affected by a local code execution vulnerability disclosed as CVE-2022-29819. The issue arises from the execution of native code via a link in Quick Documentation, enabling local code execution when a user interacts with these links. Associated advisorie...
CVE-2022-29818
CVE-2022-29818 affects JetBrains IntelliJ IDEA prior to 2022.1. The issue is flawed origin checks in the internal web server, resulting in an access control error. Public details in connected sources describe it as an access control vulnerability, with no further exploit specifics or remediation ...
CVE-2022-29818
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...
CVE-2022-29817
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...
CVE-2022-29817
JetBrains IntelliJ IDEA before 2022.1 is affected by a reflected XSS vulnerability in the internal web server, triggered by error messages. The issue allows execution of JavaScript on the client; CVSS context is provided in the sources, but the documents do not specify a patch version or remediat...
CVE-2022-29816
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
CVE-2022-29816
JetBrains IntelliJ IDEA prior to 2022.1 is affected by HTML injection into IDE messages. The issue arises from injecting HTML into the IDE’s message rendering, enabling potential HTML-based content exposure. Remediation is to upgrade to IntelliJ IDEA 2022.1 or later, where the fix is applied. Off...
CVE-2022-29815
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...
CVE-2022-29815
The CVE-2022-29815 entry covers a local code execution vulnerability in JetBrains IntelliJ IDEA prior to 2022.1, achievable via workspace settings. The affected software is JetBrains IntelliJ IDEA (pre-2022.1); the issue arises from how workspace settings are processed, enabling code execution on...
CVE-2022-29814
CVE-2022-29814 affects JetBrains IntelliJ IDEA before 2022.1, enabling local code execution through HTML descriptions in custom JSON schemas. The vulnerability is described across multiple sources (NVD, Red Hat, CNVD, CVE records) with local exploit potential; no remediation or patch version is s...