PublicCVE

CVE-2022-29814

MEDIUM6.9Remote code exec
JSON exportCreate alert

Description

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible

CVSS breakdown

CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None

Affected products

References