CVE-2022-47895

HIGH 7.5CVE-2022-47895 · Published 22/12/2022 · updated 17/06/2026

In short

CVE-2022-47895 is a HIGH (CVSS 7.5) vulnerability affecting intellij idea (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.1% of all vulnerabilities.
Fix: update to 2022.3.1 or later.

Package	Affected versions	Patched versions
intellij idea jetbrains	`< 2022.3.1`	`2022.3.1`

In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.