Sploitus Critical Vulnerabilities in GitHub Plugins and Git Affecting User Security
Article Content
- •CVE-2024-37051 exposes GitHub tokens via malicious pull requests in JetBrains IDE.
- •CVE-2024-32002 allows remote command execution through vulnerable Git submodules.
- •Users must update software and revoke tokens to prevent unauthorized access.
Two critical vulnerabilities have been identified affecting GitHub integration in JetBrains IDE and Git version 2.45.0. CVE-2024-37051 allows unauthorized disclosure of GitHub access tokens through malicious pull requests in JetBrains IDE, risking access to private repositories. Users must update their IDE and revoke existing tokens immediately. CVE-2024-32002 enables remote command execution via git clone using vulnerable submodule configurations, requiring specific settings to exploit. Both vulnerabilities pose significant risks to users and organizations relying on these tools for development. Immediate action is recommended to mitigate potential breaches.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2024-37051 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…