SecuriTricks - CVE-2025-29903

Description

In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible

Product(s) Impacted

Vendor	Product	Versions
Jetbrains	Runtime	21.0.6b872.80

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-426

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	jetbrains	runtime	21.0.6b872.80	/	/	/	/	/	/	/

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS Score

5.2 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: CHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

View Vector String

Timeline

Published: March 12, 2025, 1:15 p.m.
Last Modified: March 12, 2025, 1:15 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

cve@jetbrains.com

CVE-2025-29903