Security Vulnerabilities fixed in IntelliJ IDEA 223.8214.52

Description

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files and Code Templates were vulnerable to SSTI attacks.

Affected Applications

IntelliJ IDEA

CVE References

CVE-2022-47895 CVE-2022-47896

Other References

https://www.jetbrains.com/privacy-security/issues-fixed/