CVE-2022-47896 MEDIUM

CVE-2022-47896

Vendor Jetbrains

Product IntelliJ IDEA

Weakness CWE-1336

Published December 22, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

5.0/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.

Key dates

02Disclosure timeline

December 22, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-47896 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1336.html

Related vulnerabilities

04Related CVE

CVE-2026-6984 AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine CVE-2024-58293 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields CVE-2021-39128 CVE-2026-5987 Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine CVE-2026-33897 Incus vulnerable to arbitrary file read and write through pongo templates