CVE-2022-29816

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...

CVE-2022-29816

JetBrains IntelliJ IDEA prior to 2022.1 is affected by HTML injection into IDE messages. The issue arises from injecting HTML into the IDE’s message rendering, enabling potential HTML-based content exposure. Remediation is to upgrade to IntelliJ IDEA 2022.1 or later, where the fix is applied. Off...

CVE-2022-29815

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...

CVE-2022-29815

The CVE-2022-29815 entry covers a local code execution vulnerability in JetBrains IntelliJ IDEA prior to 2022.1, achievable via workspace settings. The affected software is JetBrains IntelliJ IDEA (pre-2022.1); the issue arises from how workspace settings are processed, enabling code execution on...

CVE-2022-29814

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...

CVE-2022-29814

CVE-2022-29814 affects JetBrains IntelliJ IDEA before 2022.1, enabling local code execution through HTML descriptions in custom JSON schemas. The vulnerability is described across multiple sources (NVD, Red Hat, CNVD, CVE records) with local exploit potential; no remediation or patch version is s...

CVE-2022-29813

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...

CVE-2022-29813

JetBrains IntelliJ IDEA is affected by a local code execution vulnerability (CVE-2022-29813) due to a custom Pandoc path, allowing code execution on systems that run before version 2022.1. The connected documents confirm the issue but do not provide detailed technical steps, affected subcomponent...

CVE-2022-29812

CVE-2022-29812 affects JetBrains IntelliJ IDEA prior to version 2022.1, where the notification mechanism did not adequately warn users about the use of Unicode directionality formatting characters. The issue is described across multiple sources as a vulnerability in IntelliJ IDEA before 2022.1, w...

CVE-2022-29812

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...

PT-2022-19851

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue is related to flawed origin checks in the internal web server of JetBrains IntelliJ IDEA. This flaw could potentially be exploited. Recommendations For versions prior to...

Jetbrains JetBrains IntelliJ IDEA 跨站脚本漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from the Czech company JetBrains. A cross-site scripting vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.1, which stems from injecting HTML into IDE messages...

CVE-2022-29818: Origin Validation Error

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...

CVE-2022-29812: Improper Handling of Unicode Encoding

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...

CVE-2022-29814: Improper Control of Generation of Code

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...

CVE-2022-29813: Improper Control of Generation of Code

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...

CVE-2022-29815: Improper Control of Generation of Code

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...

CVE-2022-29819: Improper Control of Generation of Code

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...

CVE-2022-29817: Improper Neutralization of Input During Web Page Generation

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible...

Jetbrains JetBrains IntelliJ IDEA 访问控制错误漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from Jetbrains Czech Republic.JetBrains IntelliJ IDEA versions prior to 2022.1 are vulnerable to an access control error vulnerability that stems from a flaw in source checking in the internal web server...