{
    "id": "CVE-2024-37051",
    "published": "2024-06-10 16:15:16",
    "last_modified": "2026-06-17 07:37:40",
    "cvss_score": "9.3",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
    "cwe": "CWE-522",
    "description": "GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4",
    "epss_score": "0.04883",
    "epss_percentile": "0.91834",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-07 18:17:38",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.3), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "jetbrains",
            "product": "aqua"
        },
        {
            "vendor": "jetbrains",
            "product": "clion"
        },
        {
            "vendor": "jetbrains",
            "product": "datagrip"
        },
        {
            "vendor": "jetbrains",
            "product": "dataspell"
        },
        {
            "vendor": "jetbrains",
            "product": "goland"
        },
        {
            "vendor": "jetbrains",
            "product": "intellij_idea"
        },
        {
            "vendor": "jetbrains",
            "product": "mps"
        },
        {
            "vendor": "jetbrains",
            "product": "phpstorm"
        },
        {
            "vendor": "jetbrains",
            "product": "pycharm"
        },
        {
            "vendor": "jetbrains",
            "product": "rider"
        },
        {
            "vendor": "jetbrains",
            "product": "rubymine"
        },
        {
            "vendor": "jetbrains",
            "product": "rustrover"
        },
        {
            "vendor": "jetbrains",
            "product": "webstorm"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://security.netapp.com/advisory/ntap-20240705-0004/",
        "https://www.jetbrains.com/privacy-security/issues-fixed/",
        "https://security.netapp.com/advisory/ntap-20240705-0004/",
        "https://www.jetbrains.com/privacy-security/issues-fixed/"
    ]
}