Vulnerabilitycritical
Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromised
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-30080 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 | 43% | ||
| CVE-2024-30103 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | 3% | ||
| CVE-2024-37051 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than | 7.5 | 4% | ||
| CVE-2024-4577 | OS Command Injection in Windows PHP-CGI Allows Remote Code Execution | 9.8 | 100% | KEVRansomwarePoC ×11 | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) JetBrains has fixed a critical vulnerability (CVE-2024-37051) that could expose users of its integrated development environments (IDEs) to GitHub access token compromise.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.