3 matches found
CVE-2021-36209
In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.
CVE-2021-37540
In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.
CVE-2021-37541
In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.