Vulnerabilities

TI-2022-12179 CVE-2022-29819 · GHSA-f3mj-x3hh-929r

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible

LOW 33

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00234 Published 2022-04-28 Fixed in 2022.1 CWE-94

TI-2022-12178 CVE-2022-29818 · GHSA-jh65-wr8h-fp4f

LOW 30

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0015 Published 2022-04-28 Fixed in 2022.1 CWE-346

TI-2022-12177 CVE-2022-29817 · GHSA-q8rg-9c8g-rv67

LOW 27

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2022-04-28 Fixed in 2022.1 CWE-79

TI-2022-12176 CVE-2022-29816 · GHSA-wpg9-vg72-4v62

LOW 15

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible

CVSS 3.1LOW 3.2 Local Low privileges User interaction EPSS 0.0027 Published 2022-04-28 Fixed in 2022.1 CWE-74

TI-2022-12175 CVE-2022-29815 · GHSA-96xh-h4gh-f43m

LOW 30

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible

CVSS 3.1MEDIUM 6.9 Local High privileges User interaction EPSS 0.00221 Published 2022-04-28 Fixed in 2022.1 CWE-94

TI-2022-12174 CVE-2022-29814 · GHSA-jfw2-9v4j-cmrf

LOW 33

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00234 Published 2022-04-28 Fixed in 2022.1 CWE-94

TI-2022-12173 CVE-2022-29813 · GHSA-7prh-rmp5-66jp

LOW 30

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible

CVSS 3.1MEDIUM 6.9 Local High privileges User interaction EPSS 0.0022 Published 2022-04-28 Fixed in 2022.1 CWE-94

TI-2022-12172 CVE-2022-29812 · GHSA-m63q-r62f-3wj7

LOW 11

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient

CVSS 3.1LOW 2.3 Local High privileges User interaction EPSS 0.00184 Published 2022-04-28 Fixed in 2022.1 CWE-176