Dashboard / CVE-2024-37051

CVE-2024-37051

CRITICAL 2 PoCs
INFO Priority: 0.45 BB Relevance: 80/100
Published: 2024-06-10 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Changed
C: High
I: High
A: None

Description

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Weakness Classification (1)

Affected Software (118)

VendorProductVersion
JetBrains Aqua 0 < 2024.1.2
JetBrains Aqua 0 < 2024.1.2
JetBrains CLion 2023.1 < 2023.1.7
JetBrains CLion 2023.1 < 2023.2.4
JetBrains CLion 2023.1 < 2023.3.5
JetBrains CLion 2023.1 < 2024.1.3
JetBrains CLion 2023.1 < 2024.2 EAP2
JetBrains CLion 2023.1 < 2023.1.7
JetBrains CLion 2023.1 < 2023.2.4
JetBrains CLion 2023.1 < 2023.3.5
JetBrains CLion 2023.1 < 2024.1.3
JetBrains CLion 2023.1 < 2024.2 EAP2
JetBrains DataGrip 2023.1 < 2023.1.3
JetBrains DataGrip 2023.1 < 2023.2.4
JetBrains DataGrip 2023.1 < 2023.3.5
JetBrains DataGrip 2023.1 < 2024.1.4
JetBrains DataGrip 2023.1 < 2023.1.3
JetBrains DataGrip 2023.1 < 2023.2.4
JetBrains DataGrip 2023.1 < 2023.3.5
JetBrains DataGrip 2023.1 < 2024.1.4
JetBrains DataSpell 2023.1 < 2023.1.6
JetBrains DataSpell 2023.1 < 2023.2.7
JetBrains DataSpell 2023.1 < 2023.3.6
JetBrains DataSpell 2023.1 < 2024.1.2
JetBrains DataSpell 2023.1 < 2024.2 EAP1
JetBrains DataSpell 2023.1 < 2023.1.6
JetBrains DataSpell 2023.1 < 2023.2.7
JetBrains DataSpell 2023.1 < 2023.3.6
JetBrains DataSpell 2023.1 < 2024.1.2
JetBrains DataSpell 2023.1 < 2024.2 EAP1
Showing 30 of 118 entries

References & Advisories (2)

Proof of Concept (2)

★ 29
https://github.com/LeadroyaL/CVE-2024-37051-EXP
nomi-sec
—
https://github.com/mrblackstar26/CVE-2024-37051
nomi-sec

Bug Bounty Relevance

80 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ PoC available (2)

CVSS Score

9.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

EPSS — Exploitation Probability

4.88%
Raw Score 0.048830
Percentile 92.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.04883
2026-11-12
0.04883
2026-11-10
0.04883
2026-11-09
0.04883
2026-11-08
0.04883
2026-11-07
0.04883
2026-11-06
0.04883
2026-11-05
0.04883
2026-11-04
0.04883
2026-11-03
0.04883

Intelligence Sources

mitre ref →
nvd ref →

External Links