Lucene search

Hub Security Vulnerabilities - CVSS Score 9 - 10

cve

In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

9.8CVSS

9.5AI Score

0.002EPSS

2021-08-06 02:15 PM

cve

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.

9.8CVSS

9.5AI Score

0.003EPSS

2021-11-09 03:15 PM

cve

JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

9.1CVSS

9.2AI Score

0.002EPSS

2022-02-25 08:15 PM

cve

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

9.8CVSS

9.4AI Score

0.002EPSS

2022-02-25 08:15 PM

126

cve

In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

9.8CVSS

9.3AI Score

0.002EPSS

2023-04-24 01:15 PM