PT-2021-21702 · Jetbrains · Rubymine

Published 2021-08-06 · Updated 2021-08-12 · CVE-2021-37543

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains RubyMine versions prior to 2021.1.1

Description The issue allows for code execution without user confirmation in untrusted projects.

Recommendations For versions prior to 2021.1.1, update to version 2021.1.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-37543

Affected Products

Rubymine

References · 5

• https://osv.dev/vulnerability/CVE-2021-37543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37543 · Security Note
• https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021 · Vendor Advisory
• https://t.me/cibsecurity/26955 · Telegram Post
• https://t.me/cvenotify/18775 · Telegram Post