deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-40074
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/3; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/3
CVE: CVE-2022-40075
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/1; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/1
CVE: CVE-2022-40076
Published: 2022-09-19
Description: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/4; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/4
CVE: CVE-2022-40424
Published: 2022-09-19
Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-urls/issues/9; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-urls/issues/9
CVE: CVE-2022-40427
Published: 2022-09-19
Description: The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-domains/issues/7; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-domains/issues/7
CVE: CVE-2022-40805
Published: 2022-09-19
Description: The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-urls/issues/10; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-urls/issues/10
CVE: CVE-2022-40806
Published: 2022-09-19
Description: The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-uuids/issues/5; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-uuids/issues/5
CVE: CVE-2022-40807
Published: 2022-09-19
Description: The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-domains/issues/8; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-domains/issues/8
CVE: CVE-2022-40808
Published: 2022-09-19
Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-dates/issues/26; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-dates/issues/26
CVE: CVE-2022-40811
Published: 2022-09-19
Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-urls/issues/11; https://pypi.org/project/democritus-file-system/; https://github.com/democritus-project/d8s-urls/issues/11
CVE: CVE-2022-29908
Published: 2022-09-19
Description: The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-295
References: https://help.cloud.fabasoft.com/index.php?topic=doc/Technical-Information-eng/the-fabasoft-cloud-enterprise-client.htm; https://www.compass-security.com/fileadmin/Research/Advisories/2022_13_CSNC-2022-010_LPE_Cloud_Client.txt; https://help.cloud.fabasoft.com/index.php?topic=doc/Technical-Information-eng/the-fabasoft-cloud-enterprise-client.htm
CVE: CVE-2022-35699
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35700
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35701
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35702
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35703
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35704
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35705
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35706
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35707
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35708
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35709
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-35914
Published: 2022-09-19
Description: /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: http://packetstormsecurity.com/files/169501/GLPI-10.0.2-Command-Injection.html; http://www.bioinformatics.org/phplabware/sourceer/sourceer.php?&Sfs=htmLawedTest.php&Sl=.%2Finternal_utilities%2FhtmLawed; https://github.com/Orange-Cyberdefense/CVE-repository/
CVE: CVE-2022-37203
Published: 2022-09-19
Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/AgainstTheLight/CVE-2022-37203/blob/main/README.md; https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql3.md; https://github.com/AgainstTheLight/CVE-2022-37203/blob/main/README.md
CVE: CVE-2022-37700
Published: 2022-09-19
Description: Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://zentao.com; https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig; https://medium.com/%40sc0p3hacker/cve-2022-37700-directory-transversal-in-zentao-easy-soft-alm-2573c1f0fc21
CVE: CVE-2022-38425
Published: 2022-09-19
Description: Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb22-49.html; https://helpx.adobe.com/security/products/bridge/apsb22-49.html
CVE: CVE-2022-38577
Published: 2022-09-19
Description: ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281, CWE-281
References: http://packetstormsecurity.com/files/168427/ProcessMaker-Privilege-Escalation.html; http://processmaker.com; https://drive.google.com/file/d/1iP9NYUkYEy_FGMpcnTkUWn8nGcqDT02_/view?usp=sharing
CVE: CVE-2022-38618
Published: 2022-09-19
Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/country_group.jsf.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://bpcbt.com; http://smartvista.com; https://dtro.gitbook.io/note_cve/sql-injection-in-terminal-tariff-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38618
CVE: CVE-2022-38881
Published: 2022-09-19
Description: The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-archives/issues/12; https://pypi.org/project/d8s-archives/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38882
Published: 2022-09-19
Description: The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-json/issues/9; https://pypi.org/project/d8s-json/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38883
Published: 2022-09-19
Description: The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-math/issues/11; https://pypi.org/project/d8s-math/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38884
Published: 2022-09-19
Description: The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-grammars/issues/6; https://pypi.org/project/d8s-grammars/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38885
Published: 2022-09-19
Description: The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-netstrings/issues/4; https://pypi.org/project/d8s-netstrings/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38886
Published: 2022-09-19
Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-xml/issues/10; https://pypi.org/project/d8s-xml/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-38887
Published: 2022-09-19
Description: The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/democritus-project/d8s-python/issues/36; https://pypi.org/project/d8s-python/; https://pypi.org/project/democritus-strings/
CVE: CVE-2022-40425
Published: 2022-09-19
Description: The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-html/issues/11; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-html/issues/11
CVE: CVE-2022-40426
Published: 2022-09-19
Description: The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-asns/issues/8; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-asns/issues/8
CVE: CVE-2022-40428
Published: 2022-09-19
Description: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-mpeg/issues/5; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-mpeg/issues/5
CVE: CVE-2022-40429
Published: 2022-09-19
Description: The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-ip-addresses/issues/12; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-ip-addresses/issues/12
CVE: CVE-2022-40430
Published: 2022-09-19
Description: The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-utility/issues/9; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-utility/issues/9
CVE: CVE-2022-40431
Published: 2022-09-19
Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-pdfs/issues/5; https://pypi.org/project/democritus-networking/; https://github.com/democritus-project/d8s-pdfs/issues/5
CVE: CVE-2022-40432
Published: 2022-09-19
Description: The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/democritus-project/d8s-strings/issues/21; https://pypi.org/project/d8s-strings/; https://pypi.org/project/democritus-hypothesis/
CVE: CVE-2022-40712
Published: 2022-09-19
Description: An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-40713
Published: 2022-09-19
Description: An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-40714
Published: 2022-09-19
Description: An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-40715
Published: 2022-09-19
Description: An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-40809
Published: 2022-09-19
Description: The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-dicts/issues/6; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-dicts/issues/6
CVE: CVE-2022-40810
Published: 2022-09-19
Description: The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-ip-addresses/issues/13; https://pypi.org/project/democritus-hypothesis/; https://github.com/democritus-project/d8s-ip-addresses/issues/13
CVE: CVE-2022-40812
Published: 2022-09-19
Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-pdfs/issues/6; https://pypi.org/project/democritus-file-system/; https://github.com/democritus-project/d8s-pdfs/issues/6
CVE: CVE-2022-40978
Published: 2022-09-19
Description: The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking
CVSS Score: 7.5 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/