CVE-2022-37009 - In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Back Back to CVE browser

HIGH

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Published Jul 28, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.25%

Description

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Affected products

Vendor JetBrains Product IntelliJ IDEA Default
n/a
- Version
  2022.2
  Status
  affected
  Constraints
  <2022.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

JetBrains

IntelliJ IDEA

n/a

Version	Status	Constraints
2022.2	affected	<2022.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-39666
Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-39666		Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner JetBrains

Published Jul 28, 2022

Updated Oct 2, 2026

Reserved Jul 28, 2022

Link CVE-2022-37009

CISA Vulnrichment

Updated Oct 1, 2026

NVD

Status Modified

Modified Oct 2, 2026

Link CVE-2022-37009

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-37009

ENISA EUVD

Assigner JetBrains

Published Jul 28, 2022

Updated Oct 2, 2026

Exploited since n/a

Link EUVD-2022-39666

EUVD-2022-39666