CVE-2022-37010
LOWCVSS 3.3/10EPSS 0.17%
Last modified
CVE-2022-37010 is a low-severity vulnerability rated 3.3/10 on the CVSS scale. In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Jetbrains | Intellij Idea | < 2022.2 |
References
- https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory
- https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-37010?
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed
How severe is CVE-2022-37010?
CVE-2022-37010 has a CVSS score of 3.3/10 (LOW severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2022-37010?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-37005The Settings application has an argument injection vulnerabi…7.5
- CVE-2022-37006Permission control vulnerability in the network module. Succ…7.5
- CVE-2022-37007The chinadrm module has an out-of-bounds read vulnerability.…7.5
- CVE-2022-37008The recovery module has a vulnerability of bypassing the ver…7.5
- CVE-2022-37009In JetBrains IntelliJ IDEA before 2022.2 local code executio…7.8
- CVE-2022-3701 A privilege elevation vulnerability was reported in the Len…7.8
- CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7…9.8
- CVE-2022-37012This vulnerability allows remote attackers to create a denia…7.5
- CVE-2022-37013This vulnerability allows remote attackers to create a denia…7.5
- CVE-2022-37015Symantec Endpoint Detection and Response (SEDR) Appliance, p…9.8
- CVE-2022-37016Symantec Endpoint Protection (Windows) agent may be suscepti…9.8
- CVE-2022-37017Symantec Endpoint Protection (Windows) agent, prior to 14.3 …7.5
Are you affected by CVE-2022-37010?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST