In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
References
Link | Resource |
---|---|
https://www.jetbrains.com/privacy-security/issues-fixed/ | Vendor Advisory |
Configurations
Information
Published : 2022-12-22 03:15
Updated : 2022-12-29 09:28
NVD link : CVE-2022-47896
Mitre link : CVE-2022-47896
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
jetbrains
- intellij_idea