First published: Thu Apr 28 2022(Updated: )
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
Credit: security@jetbrains.com
Affected Software | Affected Version | How to fix |
---|---|---|
JetBrains IntelliJ IDEA | <2022.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this IntelliJ IDEA vulnerability is CVE-2022-29816.
The severity of CVE-2022-29816 is low with a severity value of 3.2.
CVE-2022-29816 is a vulnerability in JetBrains IntelliJ IDEA before 2022.1 that allows HTML injection into IDE messages.
Versions up to exclusive 2022.1 of JetBrains IntelliJ IDEA are affected by CVE-2022-29816.
To fix CVE-2022-29816, update your JetBrains IntelliJ IDEA to a version after 2022.1.