整合開發環境IntelliJ存在重大漏洞，恐曝露GitHub存取憑證
支付動態 · 2024-06-12
軟體開發業者JetBrains針對旗下整合開發環境（IDE）漏洞CVE-2024-37051提出警告，並指出這項漏洞，主要影響啟動GitHub外掛程式的用戶
6月11日軟體開發業者JetBrains發布資安公告，指出他們在5月29日接獲通報，存在整合開發環境（IDE）IntelliJ平臺的漏洞CVE-2024-37051，有可能會影響拉取請求而被用於攻擊行動，CVSS風險評為9.3分。
當開發者使用基於這套IDE平臺時，攻擊者會藉由惡意內容，引誘拉取特定GitHub專案，從而讓開發者的存取Token外流至第三方主機。
該公司指出，這項弱點影響IntelliJ平臺所有2023.1以上版本的IDE，只要開發者同時啟用他們提供的GitHub外掛程式，就有可能曝險。他們提供新版IDE及外掛程式修補漏洞，並呼籲開發者若曾透過這套IDE拉取GitHub專案，應註銷外掛程式所用的Token。
熱門文章
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Indiana online casino bill stalls in House committee
Regulation
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
