CVE-2022-47896CWE-1336

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks

Medium · published December 22, 2022

CVSS v3.1
5.0
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 17.0th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2022-12-22T10:25Z
EPSS history
Timeline
  • 22 DEC 10:25Z
    In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks
    cvelistv5