HTTP Protocol Vulnerability in JetBrains IntelliJ IDEA Affects File Validation
CVE-2022-47895

4.7MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
22 December 2022

What is CVE-2022-47895?

In JetBrains IntelliJ IDEA prior to version 2022.3.1, the 'Validate JSP File' action improperly utilized the HTTP protocol to download necessary JAR files. This flaw can potentially expose the application to security risks as it relies on external sources via HTTP, which may not be secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

IntelliJ IDEA 0 < 2022.3.1

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.