Version 2022.1

CVE-2022-29819

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible

MEDIUM CVSS 6.9 Published Apr 28, 2022

CVE-2022-29818

In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed

LOW CVSS 3.9 Published Apr 28, 2022

CVE-2022-29817

In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible

LOW CVSS 3.9 Published Apr 28, 2022

CVE-2022-29816

In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible

LOW CVSS 2.8 Published Apr 28, 2022

CVE-2022-29815

In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible

MEDIUM CVSS 6.9 Published Apr 28, 2022

CVE-2022-29814

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible

MEDIUM CVSS 6.9 Published Apr 28, 2022

CVE-2022-29813

In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible

MEDIUM CVSS 6.9 Published Apr 28, 2022

CVE-2022-29812

In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient

LOW CVSS 2.3 Published Apr 28, 2022