PT-2021-17918 · Unknown · Swift Development Environment

Ryotak · Published 2021-03-18 · Updated 2021-04-26 · CVE-2021-28792

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Swift Development Environment extension version 2.12.0 and earlier

Description: The issue allows remote attackers to execute arbitrary code by constructing a malicious workspace with crafted configuration values, including sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift driver bin, or swift.path.shell, which triggers execution upon opening the workspace.

Recommendations: For versions prior to 2.12.1, update to version 2.12.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable configuration values until a patch is applied. Avoid using the parameters sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift driver bin, or swift.path.shell in the affected workspace configuration until the issue is resolved.

Fix

Related Identifiers

CVE-2021-28792

Affected Products

Swift Development Environment

References · 6

• https://osv.dev/vulnerability/CVE-2021-28792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28792 · Security Note
• https://github.com/vknabel/vscode-swift-development-environment/releases/tag/2.12.1 · Note
• https://vuln.ryotak.me/advisories/14 · Note
• https://t.me/cvenotify/12623 · Telegram Post
• https://t.me/cibsecurity/25130 · Telegram Post