Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-37051 — Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) | Kitploit
Tools/GitHubGitHub/mrblackstar26/cve-2024-37051
Vulnerability AnalysisExploitationInformation GatheringWeb SecurityLearning & Education
GitHubmrblackstar26/cve-2024-37051

CVE-2024-37051

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

View Repository
332 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-37051 Analysis

Overview

CVE-2024-37051 is a vulnerability found in JetBrains' IntelliJ-based IDEs, affecting the GitHub plugin. It allows unauthorized exposure of GitHub access tokens when a malicious pull request (PR) is loaded.

Technical Details

The vulnerability occurs during the rendering process of a PR in the IDE. Malicious PRs can cause the IDE to send GitHub tokens to an attacker's specified URL. The patch includes host validation to ensure tokens are sent only to authorized GitHub domains.

Impact

The primary risk is unauthorized access to GitHub tokens, allowing attackers to access private repositories, modify code, and access sensitive data. This requires the user to load a malicious PR. Prompt updates to the latest IDE version and revoking existing tokens are recommended.

Mitigation

  • Update IDE and GitHub Plugin: Ensure you have the latest versions.
  • Revoke and Regenerate Tokens: Prevent misuse of compromised tokens.

For more details, visit the original analysis.

Download Tool