CVE-2022-47895CWE-319

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files

Medium · published December 22, 2022

CVSS v3.1
4.7
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-12-22T10:25Z
EPSS history
Timeline
  • 22 DEC 10:25Z
    In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files
    cvelistv5