CRITICAL🇵🇱 Wersja polska

CVE-2021-45977

CVSS 9.8v3.1pub. 2022-02-25upd. 2024-11-21

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Jetbrains Clion

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Goland

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Intellij Idea

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Phpstorm

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Pycharm

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Rubymine

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Webstorm

    APP
    Jetbrains
    2021.3.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-64812CRITICAL10.0PL ✓same product

JetBrains IntelliJ IDEA — nieautoryzowany input injection w sesji Remote Development

CVE-2026-64813CRITICAL10.0PL ✓same product

JetBrains IntelliJ IDEA – nieautoryzowana modyfikacja ustawień w sesji Remote Development

CVE-2026-59792CRITICAL9.6PL ✓same product

RCE poprzez path traversal w obsłudze ID przestrzeni roboczej w IntelliJ IDEA

CVE-2024-37051CRITICAL9.3PL ✓same product

Wyciek tokenu GitHub do stron trzecich w JetBrains IDE

CVE-2021-31897CRITICAL9.8PL ✓same product

JetBrains WebStorm — wykonanie kodu bez potwierdzenia dla niezaufanych projektów