CVE-2022-29821 MEDIUM

CVE-2022-29821

Vendor Jetbrains

Product Rider

Weakness CWE-94 · Code injection

Published April 28, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible

Key dates

02Disclosure timeline

April 28, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29821 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex CVE-2026-54074 @tinacms/cli: Remote Code Execution via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels CVE-2026-47117 OpenMed < 1.5.2 Remote Code Execution via PII Model Loading CVE-2026-0414 Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers CVE-2026-33646 mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)