CVE-2024-37051

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jun 10, 2024
Source updated: Feb 13, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

IntelliJ IDEA

Vendor: JetBrains
Product: IntelliJ IDEA
Platforms: Unknown
Default status: unaffected

IntelliJ IDEA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.7	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.7	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP3	Unavailable	None listed

Aqua

Vendor: JetBrains
Product: Aqua
Platforms: Unknown
Default status: unaffected

Aqua · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2024.1.2	Unavailable	None listed

CLion

Vendor: JetBrains
Product: CLion
Platforms: Unknown
Default status: unaffected

CLion · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.7	Unavailable	None listed
2023.1	`affected`	semver	2023.2.4	Unavailable	None listed
2023.1	`affected`	semver	2023.3.5	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP2	Unavailable	None listed

DataGrip

Vendor: JetBrains
Product: DataGrip
Platforms: Unknown
Default status: unaffected

DataGrip · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.3	Unavailable	None listed
2023.1	`affected`	semver	2023.2.4	Unavailable	None listed
2023.1	`affected`	semver	2023.3.5	Unavailable	None listed
2023.1	`affected`	semver	2024.1.4	Unavailable	None listed

DataSpell

Vendor: JetBrains
Product: DataSpell
Platforms: Unknown
Default status: unaffected

DataSpell · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.6	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.6	Unavailable	None listed
2023.1	`affected`	semver	2024.1.2	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP1	Unavailable	None listed

GoLand

Vendor: JetBrains
Product: GoLand
Platforms: Unknown
Default status: unaffected

GoLand · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.6	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.7	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP3	Unavailable	None listed

MPS

Vendor: JetBrains
Product: MPS
Platforms: Unknown
Default status: unaffected

MPS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.2.1	Unavailable	None listed
2023.1	`affected`	semver	2023.3.1	Unavailable	None listed
2023.1	`affected`	semver	2024.1 EAP2	Unavailable	None listed

PhpStorm

Vendor: JetBrains
Product: PhpStorm
Platforms: Unknown
Default status: unaffected

PhpStorm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.6	Unavailable	None listed
2023.1	`affected`	semver	2023.2.6	Unavailable	None listed
2023.1	`affected`	semver	2023.3.7	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP3	Unavailable	None listed

PyCharm

Vendor: JetBrains
Product: PyCharm
Platforms: Unknown
Default status: unaffected

PyCharm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.6	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.6	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP2	Unavailable	None listed

Rider

Vendor: JetBrains
Product: Rider
Platforms: Unknown
Default status: unaffected

Rider · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.7	Unavailable	None listed
2023.1	`affected`	semver	2023.2.5	Unavailable	None listed
2023.1	`affected`	semver	2023.3.6	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed

RubyMine

Vendor: JetBrains
Product: RubyMine
Platforms: Unknown
Default status: unaffected

RubyMine · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.7	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.7	Unavailable	None listed
2023.1	`affected`	semver	2024.1.3	Unavailable	None listed
2023.1	`affected`	semver	2024.2 EAP4	Unavailable	None listed

RustRover

Vendor: JetBrains
Product: RustRover
Platforms: Unknown
Default status: unaffected

RustRover · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	2024.1.1	Unavailable	None listed

WebStorm

Vendor: JetBrains
Product: WebStorm
Platforms: Unknown
Default status: unaffected

WebStorm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2023.1	`affected`	semver	2023.1.6	Unavailable	None listed
2023.1	`affected`	semver	2023.2.7	Unavailable	None listed
2023.1	`affected`	semver	2023.3.7	Unavailable	None listed
2023.1	`affected`	semver	2024.1.4	Unavailable	None listed