CVE-2022-48431

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-345

Affected software

No affected versions have been published.

Timeline

Published
Mar 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484328.8In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.CVE-2022-484337.5In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.CVE-2022-484348.1libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which alCVE-2022-484353.3In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log fileCVE-2022-484375.3An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain doesCVE-2022-484384.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2022-484394.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2022-48448.8Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484405.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484415.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484425.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484435.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution
CVE-2022-48431: High severity, CVSS 7.8 | Vulnix