← All advisories

Low severity3.9NVD Advisory· Published Dec 8, 2022· Updated Jun 17, 2026

CVE-2022-46827

CVE-2022-46827

Description

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.

Affected products

3

Jetbrains/Intellij Idea3 versions
cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*range: <2022.3
- (no CPE)range: <2022.3
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.