CVE-2022-37009 LOW

CVE-2022-37009

Vendor Jetbrains

Product IntelliJ IDEA

Weakness CWE-94 · Code injection

Published July 28, 2022

Last update August 3, 2024

CVSS base score

3.9/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Key dates

July 28, 2022 CVE published

August 3, 2024 Record updated

External resources

Related vulnerabilities