CVE-2022-25260

CVE-2022-25260 JetBrains Hub 인증 전 세미 블라인드 SSRF서버 사이드 요청 위조 요구 사항 JetBrains Hub 2021.1.14276 2021.1.14276 이전의 JetBrains Hub는 부적절한 접근 제어CVE-2022-34894에 취약하여, 게스트 사용자가 비활성화되어 있어도 공격자가 인증 없이 신뢰할 수 없는 서비스를 생성할 수 있었습니다. 이로 인해 별도의 요구 사항 없이도 취약점을 악용할 수 있습니다일반적으로 공격자는 최소한 인증된 상태여야 합니다. 사용법 설치 및 실행: $ git...

CVE-2022-25262

CVE-2022-25262 CVE-2022-25262에 대한 PoC + 취약점 세부 정보 | JetBrains Hub 원클릭 SAML 응답 탈취 CVE-2022-25262 요구 사항 사용법 어떻게 동작하나요? "OAuth2 - SAML" 교환을 위한 인증 코드 풀 YouTrack Konnector OAuth2 인증 코드 탈취 설계상 완화 조치 요구 사항 JetBrains Hub GET /get-exploit-link?huburl=https://hub.jetbrains.com&i...

CVE-2026-100266

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address...

CVE-2026-100266

In JetBrains Hub versions prior to 2026.2.52366 , a missing authorization vulnerability allows authenticated users to send arbitrary emails from the server's trusted address. This flaw impacts the integrity of communications sent via the hub. Remediation is available in version 2026.2.52366 or la...

EUVD-2026-90010

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address...

CVE-2026-100266

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

JetBrains Hub prior to version 2026.2.52442 is affected by a privilege escalation vulnerability. An unauthenticated attacker over the network could register a trusted service and subsequently gain superuser privileges , resulting in full compromise of confidentiality, integrity, and availability ...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

EUVD-2026-72496

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

PT-2026-86852

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2026.2.52442 Description An unauthenticated attacker can register a malicious trusted service through a registration endpoint where the service trust flag can be set without authentication. This allows the...

CVE-2026-86480: Missing Authentication for Critical Function

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

The vulnerability of the JetBrains Hub account management software lies in errors in the code of the pseudo-random number generator used for generating host keys. This allows a hacker to gain full control over the application.

The vulnerability of the JetBrains Hub account management software is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. This allows attackers to bypass security restrictions, gain unauthorized access to protected information, and increase their privileges.

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass security restrictions, gain unauthorized access to...

The vulnerability of the JetBrains Hub software management system lies in the insufficient control over the modification of dynamically defined object characteristics. This allows attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their privileges.

The vulnerability of the JetBrains Hub account management software is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain unauthorized access to protected...

CVE-2026-56142

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible...

CVE-2026-56141

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...