* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Tuesday, August 5, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    ‘Billie Jean’ – Hyde Park Herald

    The Enduring Magic Behind ‘Billie Jean’ Revealed

    Hank Hill returns to a changed world in new ‘King of the Hill’ episodes – New Haven Register

    Hank Hill Navigates a Bold New World in Thrilling New ‘King of the Hill’ Episodes

    Exclusive | Fox Takes Stake in IndyCar Owner Penske Entertainment – The Wall Street Journal

    Exclusive | Fox Takes Stake in IndyCar Owner Penske Entertainment – The Wall Street Journal

    Go-to entertainment: why gaming was made for the toilet – The Guardian

    Why Gaming Is the Ultimate Way to Pass Time in the Bathroom

    Chicago Youth Symphony Orchestra takes the Lollapalooza stage – Yahoo Home

    Chicago Youth Symphony Orchestra takes the Lollapalooza stage – Yahoo Home

    Sens. Blackburn, Warnock introduce CREATE Act to provide tax relief to music creators – Yahoo Home

    Sens. Blackburn and Warnock Launch CREATE Act to Deliver Tax Relief for Music Creators

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Future Trends In HR Technology – Dataconomy

    Future Trends In HR Technology – Dataconomy

    Nasdaq-listed Verb Technology to build $558 million TON treasury, rebrand as TON Strategy Co. – The Block

    Nasdaq-Listed Verb Technology to Build $558 Million TON Treasury and Rebrand as TON Strategy Co

    How Tech Firms Like Google and Meta Are Embracing the Military – The New York Times

    How Tech Firms Like Google and Meta Are Embracing the Military – The New York Times

    Credo Technology: Wiring The AI Revolution (NASDAQ:CRDO) – Seeking Alpha

    Credo Technology: Driving the Next Wave of AI Innovation

    Microsoft Seeks to Extend Access to OpenAI Technology – PYMNTS.com

    Microsoft Aims to Broaden Access to OpenAI Technology

    Livonia police use grappler technology to stop drunk driver – ClickOnDetroit | WDIV Local 4

    Livonia Police Deploy Grappler Technology to Safely Stop Drunk Driver

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    ‘Billie Jean’ – Hyde Park Herald

    The Enduring Magic Behind ‘Billie Jean’ Revealed

    Hank Hill returns to a changed world in new ‘King of the Hill’ episodes – New Haven Register

    Hank Hill Navigates a Bold New World in Thrilling New ‘King of the Hill’ Episodes

    Exclusive | Fox Takes Stake in IndyCar Owner Penske Entertainment – The Wall Street Journal

    Exclusive | Fox Takes Stake in IndyCar Owner Penske Entertainment – The Wall Street Journal

    Go-to entertainment: why gaming was made for the toilet – The Guardian

    Why Gaming Is the Ultimate Way to Pass Time in the Bathroom

    Chicago Youth Symphony Orchestra takes the Lollapalooza stage – Yahoo Home

    Chicago Youth Symphony Orchestra takes the Lollapalooza stage – Yahoo Home

    Sens. Blackburn, Warnock introduce CREATE Act to provide tax relief to music creators – Yahoo Home

    Sens. Blackburn and Warnock Launch CREATE Act to Deliver Tax Relief for Music Creators

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Future Trends In HR Technology – Dataconomy

    Future Trends In HR Technology – Dataconomy

    Nasdaq-listed Verb Technology to build $558 million TON treasury, rebrand as TON Strategy Co. – The Block

    Nasdaq-Listed Verb Technology to Build $558 Million TON Treasury and Rebrand as TON Strategy Co

    How Tech Firms Like Google and Meta Are Embracing the Military – The New York Times

    How Tech Firms Like Google and Meta Are Embracing the Military – The New York Times

    Credo Technology: Wiring The AI Revolution (NASDAQ:CRDO) – Seeking Alpha

    Credo Technology: Driving the Next Wave of AI Innovation

    Microsoft Seeks to Extend Access to OpenAI Technology – PYMNTS.com

    Microsoft Aims to Broaden Access to OpenAI Technology

    Livonia police use grappler technology to stop drunk driver – ClickOnDetroit | WDIV Local 4

    Livonia Police Deploy Grappler Technology to Safely Stop Drunk Driver

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

JetBrains warns of IntelliJ IDE bug exposing GitHub access tokens

June 12, 2024
in Technology
JetBrains warns of IntelliJ IDE bug exposing GitHub access tokens
Share on FacebookShare on Twitter

JetBrains

JetBrains warned customers to patch a critical vulnerability that impacts users of its IntelliJ integrated development environment (IDE) apps and exposes GitHub access tokens.

Tracked as CVE-2024-37051, this security flaw affects all IntelliJ-based IDEs from 2023.1 onwards, where the JetBrains GitHub plugin is enabled and configured/used.

“On the 29th of May 2024 we received an external security report with details of a possible vulnerability that would affect pull requests within the IDE,” said Ilya Pleskunin, a security support team lead at JetBrains.

“In particular, malicious content as part of a pull request to a GitHub project which would be handled by IntelliJ-based IDEs, would expose access tokens to a third-party host.”

JetBrains has released security updates that address this critical vulnerability on affected IDEs version 2023.1 or later.

The company has also patched the vulnerable JetBrains GitHub plugin and has since removed all previously impacted versions from its official plugin marketplace.

The complete list of fixed versions for IntelliJ IDEs includes:

Aqua: 2024.1.2
CLion: 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2
DataGrip: 2024.1.4
DataSpell: 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2
GoLand: 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3
IntelliJ IDEA: 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3
MPS: 2023.2.1, 2023.3.1, 2024.1 EAP2
PhpStorm: 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3
PyCharm: 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2
Rider: 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3
RubyMine: 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4
RustRover: 2024.1.1
WebStorm: 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Admins urged to patch and revoke GitHub tokens

“If you have not updated to the latest version, we strongly urge you to do so,” Pleskunin warned.

In addition to working on a security fix, JetBrains contacted GitHub to help minimize the impact. Due to measures implemented during the mitigation process, the JetBrains GitHub plugin may not function as expected in older versions of JetBrains IDEs.

JetBrains also “strongly” advised customers who have actively used GitHub pull request functionality in IntelliJ IDEs to revoke any GitHub tokens used by the vulnerable plugin as they could provide potential attackers with access to the linked GitHub accounts even with the added protection of two-factor authentication.

Additionally, if the plugin was used with OAuth integration or Personal Access Token (PAT), they should also revoke access for the JetBrains IDE Integration app and delete the IntelliJ IDEA GitHub integration plugin token.

“Please note that after the token has been revoked, you will need to set up the plugin again as all plugin features (including Git operations) will stop working,” Pleskunin said.

In February, JetBrains also warned of a critical authentication bypass vulnerability—with public exploit code available since March—that could allow attackers to gain admin privileges and take over vulnerable TeamCity On-Premises servers.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/jetbrains-warns-of-intellij-ide-bug-exposing-github-access-tokens/

Tags: JetBrainstechnologywarns
Previous Post

Windows 11 KB5039212 update released with 37 changes, fixes

Next Post

New Windows Server KB5039227 and KB5039217 updates fix LSASS crashes

Future Trends In HR Technology – Dataconomy

Future Trends In HR Technology – Dataconomy

August 5, 2025
Mississippi Sports Hall of Fame class of 2025 officially inducted – WLOX

Mississippi Sports Hall of Fame class of 2025 officially inducted – WLOX

August 5, 2025
Your nature photo might be a scientific breakthrough in disguise – ScienceDaily

Could Your Nature Photo Unlock the Next Big Scientific Breakthrough?

August 5, 2025
Scientists reexamine 47-year-old fossil and discover a new Jurassic sea monster – ScienceDaily

47-Year-Old Fossil Reveals an Astonishing New Jurassic Sea Monster

August 5, 2025
Moment of Science: Parker probe offers insights into sun, solar wind – WIS News 10

Parker Probe Unveils New Secrets About the Sun and Solar Wind

August 5, 2025
Nurse, marathon runner Jin Lee promotes healthy lifestyle by example – Bucks County Herald newspaper

Nurse, marathon runner Jin Lee promotes healthy lifestyle by example – Bucks County Herald newspaper

August 5, 2025
Who’s the top dog? Wave-riding canines compete in the World Dog Surfing Championships – NPR

Meet the Ultimate Wave-Riding Dogs Competing for the World Surfing Championship!

August 5, 2025
‘The Big Short’ investor warns despite economy’s stronghold against ‘thoughtless,’ ‘unprecedented’ tariffs so far, stagflation is coming – Fortune

The Big Short’ Investor Issues Stark Warning: Stagflation Threatens Despite Economy’s Surprising Strength Against Unprecedented Tariffs

August 5, 2025
‘Billie Jean’ – Hyde Park Herald

The Enduring Magic Behind ‘Billie Jean’ Revealed

August 5, 2025
Health insurance in Pennsylvania may see biggest hike in years – 90.5 WESA

Pennsylvania Braces for Its Largest Health Insurance Increase in Years

August 5, 2025

Categories

Archives

August 2025
MTWTFSS
 123
45678910
11121314151617
18192021222324
25262728293031
« Jul    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (755)
  • Economy (780)
  • Entertainment (21,657)
  • General (16,297)
  • Health (9,817)
  • Lifestyle (788)
  • News (22,149)
  • People (779)
  • Politics (789)
  • Science (15,993)
  • Sports (21,276)
  • Technology (15,758)
  • World (761)

Recent News

Future Trends In HR Technology – Dataconomy

Future Trends In HR Technology – Dataconomy

August 5, 2025
Mississippi Sports Hall of Fame class of 2025 officially inducted – WLOX

Mississippi Sports Hall of Fame class of 2025 officially inducted – WLOX

August 5, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version