# CVE-2024-37051: WebStorm and 12 others: Insufficiently Protected Credentials

CVE-2024-37051 is fixed in 12 products on 1 platform, first by DataGrip 2024.1.4, released June 10, 2024. 10 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-37051
- Priority: High
- CVSS: 7.5
- EPSS: 0.0488
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 10, 2024
- Weakness: CWE-522: Insufficiently Protected Credentials
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-37051

## Description

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | CLion | 2025.1 | [CLion 2025.1](https://patchblox.com/security/data/fix/windows-app/jetbrains.clion-2025.1.md) | Apr 16, 2025 |
| Windows apps | DataGrip | 2024.1.4 | [DataGrip 2024.1.4](https://patchblox.com/security/data/fix/windows-app/jetbrains.datagrip-2024.1.4.md) | Jun 10, 2024 |
| Windows apps | DataSpell | 2024.1.2 | [DataSpell 2024.1.2](https://patchblox.com/security/data/fix/windows-app/jetbrains.dataspell-2024.1.2.md) | Jun 10, 2024 |
| Windows apps | GoLand | 2024.1.3 | [GoLand 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.goland-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | IntelliJ IDEA (EAP) | 262.5752.32 | [IntelliJ IDEA (EAP) 262.5752.32](https://patchblox.com/security/data/fix/windows-app/jetbrains.intellijidea.eap-262.5752.32.md) | May 14, 2026 |
| Windows apps | IntelliJ IDEA Community Edition | 2024.1.3 | [IntelliJ IDEA Community Edition 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.intellijidea.community-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | IntelliJ IDEA Ultimate Edition | 2024.1.3 | [IntelliJ IDEA Ultimate Edition 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.intellijidea.ultimate-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | PhpStorm | 2024.3.5 | [PhpStorm 2024.3.5](https://patchblox.com/security/data/fix/windows-app/jetbrains.phpstorm-2024.3.5.md) | Mar 13, 2025 |
| Windows apps | PyCharm Community Edition | 2024.1.3 | [PyCharm Community Edition 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.pycharm.community-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | PyCharm Professional Edition | 2024.1.3 | [PyCharm Professional Edition 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.pycharm.professional-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | RubyMine | 2024.1.3 | [RubyMine 2024.1.3](https://patchblox.com/security/data/fix/windows-app/jetbrains.rubymine-2024.1.3.md) | Jun 10, 2024 |
| Windows apps | WebStorm | 2024.1.4 | [WebStorm 2024.1.4](https://patchblox.com/security/data/fix/windows-app/jetbrains.webstorm-2024.1.4.md) | Jun 10, 2024 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | CLion (EAP) | no-fix |
| Windows apps | DataSpell (EAP) | no-fix |
| Windows apps | GoLand (EAP) | no-fix |
| Windows apps | IntelliJ IDEA Ultimate Edition (EAP) | no-fix |
| Windows apps | PhpStorm (EAP) | no-fix |
| Windows apps | PyCharm (EAP) | no-fix |
| Windows apps | PyCharm Professional Edition (EAP) | no-fix |
| Windows apps | RubyMine (EAP) | no-fix |
| Windows apps | RustRover (EAP) | no-fix |
| Windows apps | WebStorm (EAP) | no-fix |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.