Lucene search

Hub Security Vulnerabilities - February 2022

cve

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.

7.5CVSS

7.5AI Score

0.002EPSS

2022-02-25 03:15 PM

654

cve

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.

6.5CVSS

6.5AI Score

0.001EPSS

2022-02-25 03:15 PM

cve

JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.

6.1CVSS

6.2AI Score

0.001EPSS

2022-02-25 08:15 PM

cve

JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

9.1CVSS

9.2AI Score

0.002EPSS

2022-02-25 08:15 PM

cve

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

9.8CVSS

9.4AI Score

0.002EPSS

2022-02-25 08:15 PM

126