CVE-2022-29814

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
JetBrainsIntelliJ IDEA>= 2022.1, < 2022.1

References

Timeline

Published
Apr 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-298156.7In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleCVE-2022-298163.2In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possibleCVE-2022-298176.1In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possibleCVE-2022-298187.1In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawedCVE-2022-298197.7In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possibleCVE-2022-29827.8Use After Free in GitHub repository vim/vim prior to 9.0.0260.CVE-2022-298203.5In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possibleCVE-2022-298217.7In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possibleCVE-2022-298229.8Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injectionCVE-2022-298239.8Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a RemoteCVE-2022-298246.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. ThCVE-2022-298257.5Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) ve
CVE-2022-29814: High severity, CVSS 7.7 | Vulnix