Skip to content

CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-37051

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; A

Read JSON ↗CVE.org ↗

Status: Published
Published: 2024-06-10
Updated: 2025-02-13
Assigning organization: JetBrains

Description

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JetBrains IntelliJ IDEA

Default version status: unaffected

2023.1 to < 2023.1.7affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.7affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP3affected

JetBrains Aqua

Default version status: unaffected

0 to < 2024.1.2affected

JetBrains CLion

Default version status: unaffected

2023.1 to < 2023.1.7affected
2023.1 to < 2023.2.4affected
2023.1 to < 2023.3.5affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP2affected

JetBrains DataGrip

Default version status: unaffected

2023.1 to < 2023.1.3affected
2023.1 to < 2023.2.4affected
2023.1 to < 2023.3.5affected
2023.1 to < 2024.1.4affected

JetBrains DataSpell

Default version status: unaffected

2023.1 to < 2023.1.6affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.6affected
2023.1 to < 2024.1.2affected
2023.1 to < 2024.2 EAP1affected

JetBrains GoLand

Default version status: unaffected

2023.1 to < 2023.1.6affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.7affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP3affected

JetBrains MPS

Default version status: unaffected

2023.1 to < 2023.2.1affected
2023.1 to < 2023.3.1affected
2023.1 to < 2024.1 EAP2affected

JetBrains PhpStorm

Default version status: unaffected

2023.1 to < 2023.1.6affected
2023.1 to < 2023.2.6affected
2023.1 to < 2023.3.7affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP3affected

JetBrains PyCharm

Default version status: unaffected

2023.1 to < 2023.1.6affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.6affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP2affected

JetBrains Rider

Default version status: unaffected

2023.1 to < 2023.1.7affected
2023.1 to < 2023.2.5affected
2023.1 to < 2023.3.6affected
2023.1 to < 2024.1.3affected

JetBrains RubyMine

Default version status: unaffected

2023.1 to < 2023.1.7affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.7affected
2023.1 to < 2024.1.3affected
2023.1 to < 2024.2 EAP4affected

JetBrains RustRover

Default version status: unaffected

0 to < 2024.1.1affected

JetBrains WebStorm

Default version status: unaffected

2023.1 to < 2023.1.6affected
2023.1 to < 2023.2.7affected
2023.1 to < 2023.3.7affected
2023.1 to < 2024.1.4affected

References