
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)
CVE-2024-37051 is a vulnerability found in JetBrains' IntelliJ-based IDEs, affecting the GitHub plugin. It allows unauthorized exposure of GitHub access tokens when a malicious pull request (PR) is loaded.
The vulnerability occurs during the rendering process of a PR in the IDE. Malicious PRs can cause the IDE to send GitHub tokens to an attacker's specified URL. The patch includes host validation to ensure tokens are sent only to authorized GitHub domains.
The primary risk is unauthorized access to GitHub tokens, allowing attackers to access private repositories, modify code, and access sensitive data. This requires the user to load a malicious PR. Prompt updates to the latest IDE version and revoking existing tokens are recommended.
For more details, visit the original analysis.