What’s Vulnerable › Vulnerabilities

CVE-2021-45977

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-25 · updated 2026-06-17

Description

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

Affected products

• JetBrains CLion: 2021.3.1
• JetBrains GoLand: 2021.3.1
• JetBrains IntelliJ IDEA: 2021.3.1-preview, 2021.3.1-rc
• JetBrains PhpStorm: 2021.3.1-preview, 2021.3.1-rc
• JetBrains PyCharm: 2021.3.1-2021.3.1
• JetBrains RubyMine: 2021.3.1-preview, 2021.3.1-rc
• JetBrains WebStorm: 2021.3.1-preview, 2021.3.1-rc

References

• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
• https://jetbrains.com
• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
• https://jetbrains.com

Get alerted when CVE-2021-45977 or the next vulnerability affects your stack