975 matches found
CVE-2022-29816
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...
CVE-2022-29816
JetBrains IntelliJ IDEA prior to 2022.1 is affected by HTML injection into IDE messages. The issue arises from injecting HTML into the IDE’s message rendering, enabling potential HTML-based content exposure. Remediation is to upgrade to IntelliJ IDEA 2022.1 or later, where the fix is applied. Off...
CVE-2022-29815
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible...
CVE-2022-29815
The CVE-2022-29815 entry covers a local code execution vulnerability in JetBrains IntelliJ IDEA prior to 2022.1, achievable via workspace settings. The affected software is JetBrains IntelliJ IDEA (pre-2022.1); the issue arises from how workspace settings are processed, enabling code execution on...
CVE-2022-29814
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
CVE-2022-29814
CVE-2022-29814 affects JetBrains IntelliJ IDEA before 2022.1, enabling local code execution through HTML descriptions in custom JSON schemas. The vulnerability is described across multiple sources (NVD, Red Hat, CNVD, CVE records) with local exploit potential; no remediation or patch version is s...
CVE-2022-29813
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...
CVE-2022-29813
JetBrains IntelliJ IDEA is affected by a local code execution vulnerability (CVE-2022-29813) due to a custom Pandoc path, allowing code execution on systems that run before version 2022.1. The connected documents confirm the issue but do not provide detailed technical steps, affected subcomponent...
CVE-2022-29812
CVE-2022-29812 affects JetBrains IntelliJ IDEA prior to version 2022.1, where the notification mechanism did not adequately warn users about the use of Unicode directionality formatting characters. The issue is described across multiple sources as a vulnerability in IntelliJ IDEA before 2022.1, w...
CVE-2022-29812
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...
PT-2022-19851
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue is related to flawed origin checks in the internal web server of JetBrains IntelliJ IDEA. This flaw could potentially be exploited. Recommendations For versions prior to...
Jetbrains JetBrains IntelliJ IDEA 跨站脚本漏洞
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from the Czech company JetBrains. A cross-site scripting vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.1, which stems from injecting HTML into IDE messages...
CVE-2022-29818: Origin Validation Error
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed...
CVE-2022-29812: Improper Handling of Unicode Encoding
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient...
PT-2022-19846
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.1 Description The issue allows for local code execution via a custom Pandoc path. Recommendations For versions prior to 2022.1, update to version 2022.1 or later to resolve the issue...
Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞
JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains Czech Republic.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which could be exploited by attackers to execute native code via workspace...
CVE-2022-29814: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
CVE-2022-29813: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible...