CVE-2022-25259

JetBrains Hub is affected by CVE-2022-25259; the vulnerability is a reflected XSS in JetBrains Hub prior to version 2021.1.14276. The connected documents consistently describe this issue as a reflected XSS in the Hub web application. No explicit root cause, affected subcomponents, patch version, ...

CVE-2022-25259

JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS...

CVE-2022-25260

JetBrains Hub before 2021.1.14276 is described in multiple sources as vulnerable to blind Server-Side Request Forgery (SSRF). The CVE-2022-25260 entry identifies this as a pre-2021.1.14276 issue, with high-severity impact reflected in the CVSS data, but the Connected documents do not provide conc...

CVE-2022-25260

JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery SSRF...

CVE-2022-25262

JetBrains Hub exposes a SAML request takeover vulnerability (CVE-2022-25262) in Hub versions before 2022.1.14434. Root cause: insufficient verification/handling of SAML requests, enabling takeover of SAML responses. Affects Hub’s SAML OAuth2->SAML exchange and may allow an attacker to misuse a...

CVE-2022-25262

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...

CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions...

CVE-2022-24328

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS...

CVE-2022-24328

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS...

CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions...

CVE-2022-24328

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS...

CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions...

Design/Logic Flaw

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS...

Code injection

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions...

CVE-2022-24328

CVE-2022-24328 affects JetBrains Hub. An unprivileged user could cause a denial of service in Hub prior to version 2021.1.13956. The issue is documented in JetBrains Security Bulletin Q4 2021, which lists the fix in 2021.1.13956. No exploitation details are provided in the connected sources beyon...

CVE-2022-24328

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS...

CVE-2022-24327

Summary: CVE-2022-24327 affects JetBrains Hub prior to 2021.1.13890, where the JetBrains Account integration exposed an API key with excessive permissions. The vulnerability stems from improper access controls during account integration, enabling an attacker who could exploit the exposed key to a...

CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions...

PT-2022-3565 · Jetbrains · Jetbrains Hub

Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2022.1.14434 Description: The issue is related to insufficient authentication data verification in JetBrains Hub, allowing a remote attacker to exploit the vulnerability and gain access to confidential data,...

JetBrains Hub 代码问题漏洞

JetBrains Hub is a web-based application from JetBrains Czech Republic. JetBrains Hub has a server-side request forgery vulnerability that stems from the software's lack of validation for request forgery, which can be exploited by attackers to conduct server-side request forgery SSRF attacks...