CVE-2022-48432 MEDIUM

CVE-2022-48432

Vendor Jetbrains

Product IntelliJ IDEA

Weakness CWE-1188

Published March 29, 2023

Last update February 12, 2025

View on NVD All CVEs

CVSS base score

5.2/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.

Key dates

02Disclosure timeline

March 29, 2023 CVE published

February 12, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-48432 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1188.html

Related vulnerabilities

04Related CVE

CVE-2025-31974 HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only CVE-2026-34742 Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost CVE-2018-25193 Mongoose Web Server 6.9 Denial of Service via Socket Connection CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer CVE-2023-40708 Improper Access Control in OPTO 22 SNAP PAC S1