PT-2021-18567 · Jetbrains · Pycharm

Tony Torralba · Published 2021-05-11 · Updated 2022-07-12 · CVE-2021-30005

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2020.3.4

Description The issue allows for local code execution due to insufficient checks when getting the project from VCS.

Recommendations For versions prior to 2020.3.4, update to version 2020.3.4 or later to resolve the issue.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2021-30005

Affected Products

Pycharm

References · 8

• 🔥 https://github.com/atorralba/CVE-2021-30005-POC · Exploit
• https://security.gentoo.org/glsa/202107-45 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30005 · Security Note
• https://blog.jetbrains.com · Vendor Advisory
• https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/3366 · Telegram Post
• https://t.me/cvenotify/17918 · Telegram Post