← All advisories

Medium severity4.7NVD Advisory· Published Dec 22, 2022· Updated Jun 17, 2026

CVE-2022-47895

CVE-2022-47895

Description

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.

Affected products

3

Jetbrains/Intellij Idea3 versions
cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*range: <2022.3.1
- (no CPE)range: <2022.3.1
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.