CVE-2024-37051

CAO 7.5CVE-2024-37051 · Công bố 10/06/2024 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2024-37051 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng aqua (jetbrains), clion (jetbrains), datagrip (jetbrains).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 4.9%, cao hơn 92.1% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2024.1.2, 2023.2.4, 2023.3.5, 2024.1.3 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
aqua jetbrains	`< 2024.1.2`	`2024.1.2`
clion jetbrains	`≥ 2023.2.0, < 2023.2.4≥ 2023.3.0, < 2023.3.5≥ 2024.1.0, < 2024.1.3< 2023.1.7`	`2023.2.42023.3.52024.1.32023.1.7`
datagrip jetbrains	`≥ 2023.1.0, < 2023.1.3≥ 2023.2.0, < 2023.2.4≥ 2023.3.0, < 2023.3.5≥ 2024.1.0, < 2024.1.4`	`2023.1.32023.2.42023.3.52024.1.4`
dataspell jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.6≥ 2024.1.0, < 2024.1.2< 2023.1.6`	`2023.2.72023.3.62024.1.22023.1.6`
goland jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.7≥ 2024.1.0, < 2024.1.3< 2023.1.6`	`2023.2.72023.3.72024.1.32023.1.6`
intellij idea jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.7≥ 2024.1.0, < 2024.1.3< 2023.1.7`	`2023.2.72023.3.72024.1.32023.1.7`
mps jetbrains	`= 2023.3.0< 2023.2.1`	`2023.2.1`
phpstorm jetbrains	`≥ 2023.2.0, < 2023.2.6≥ 2023.3.0, < 2023.3.7≥ 2024.1.0, < 2024.1.3< 2023.1.6`	`2023.2.62023.3.72024.1.32023.1.6`
pycharm jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.6≥ 2024.1.0, < 2024.1.3< 2023.1.6`	`2023.2.72023.3.62024.1.32023.1.6`
rider jetbrains	`≥ 2023.2.0, < 2023.2.5≥ 2023.3.0, < 2023.3.6≥ 2024.1.0, < 2024.1.3< 2023.1.7`	`2023.2.52023.3.62024.1.32023.1.7`
rubymine jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.7≥ 2024.1.0, < 2024.1.3< 2023.1.7`	`2023.2.72023.3.72024.1.32023.1.7`
rustrover jetbrains	`< 2024.1.1`	`2024.1.1`
webstorm jetbrains	`≥ 2023.2.0, < 2023.2.7≥ 2023.3.0, < 2023.3.7≥ 2024.1.0, < 2024.1.4< 2023.1.6`	`2023.2.72023.3.72024.1.42023.1.6`

Mô tả

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4