Lucene search

K
nvd[email protected]NVD:CVE-2024-37051
HistoryJun 10, 2024 - 4:15 p.m.

CVE-2024-37051

2024-06-1016:15:16
CWE-522
web.nvd.nist.gov
5
github; access token; jetbrains ides; security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

37.3%

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Affected configurations

NVD
Node
jetbrainsaquaRange<2024.1.2
OR
jetbrainsclionRange<2023.1.7
OR
jetbrainsclionRange2023.2.02023.2.4
OR
jetbrainsclionRange2023.3.02023.3.5
OR
jetbrainsclionRange2024.1.02024.1.3
OR
jetbrainsdatagripRange2023.1.02023.1.3
OR
jetbrainsdatagripRange2023.2.02023.2.4
OR
jetbrainsdatagripRange2023.3.02023.3.5
OR
jetbrainsdatagripRange2024.1.02024.1.4
OR
jetbrainsdataspellRange<2023.1.6
OR
jetbrainsdataspellRange2023.2.02023.2.7
OR
jetbrainsdataspellRange2023.3.02023.3.6
OR
jetbrainsdataspellRange2024.1.02024.1.2
OR
jetbrainsgolandRange<2023.1.6
OR
jetbrainsgolandRange2023.2.02023.2.7
OR
jetbrainsgolandRange2023.3.02023.3.7
OR
jetbrainsgolandRange2024.1.02024.1.3
OR
jetbrainsintellij_ideaRange<2023.1.7
OR
jetbrainsintellij_ideaRange2023.2.02023.2.7
OR
jetbrainsintellij_ideaRange2023.3.02023.3.7
OR
jetbrainsintellij_ideaRange2024.1.02024.1.3
OR
jetbrainsmpsRange<2023.2.1
OR
jetbrainsmpsMatch2023.3.0
OR
jetbrainsphpstormRange<2023.1.6
OR
jetbrainsphpstormRange2023.2.02023.2.6
OR
jetbrainsphpstormRange2023.3.02023.3.7
OR
jetbrainsphpstormRange2024.1.02024.1.3
OR
jetbrainspycharmRange<2023.1.6
OR
jetbrainspycharmRange2023.2.02023.2.7
OR
jetbrainspycharmRange2023.3.02023.3.6
OR
jetbrainspycharmRange2024.1.02024.1.3
OR
jetbrainsriderRange<2023.1.7
OR
jetbrainsriderRange2023.2.02023.2.5
OR
jetbrainsriderRange2023.3.02023.3.6
OR
jetbrainsriderRange2024.1.02024.1.3
OR
jetbrainsrubymineRange<2023.1.7
OR
jetbrainsrubymineRange2023.2.02023.2.7
OR
jetbrainsrubymineRange2023.3.02023.3.7
OR
jetbrainsrubymineRange2024.1.02024.1.3
OR
jetbrainsrustroverRange<2024.1.1
OR
jetbrainswebstormRange<2023.1.6
OR
jetbrainswebstormRange2023.2.02023.2.7
OR
jetbrainswebstormRange2023.3.02023.3.7
OR
jetbrainswebstormRange2024.1.02024.1.4

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

37.3%

Related for NVD:CVE-2024-37051