4 matches found
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...
9.8CVSS0.0144EPSS
SaveExploits1References2
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...
9.8CVSS7.2AI score0.0144EPSS
SaveExploits1References3
CVE-2022-25262
JetBrains Hub exposes a SAML request takeover vulnerability (CVE-2022-25262) in Hub versions before 2022.1.14434. Root cause: insufficient verification/handling of SAML requests, enabling takeover of SAML responses. Affects Hub’s SAML OAuth2->SAML exchange and may allow an attacker to misuse a...
9.8CVSS9.4AI score0.0144EPSS
SaveExploits1References2Affected Software1
20