Jetbrains Hub vulnerabilities
38 vulnerabilities
Known vulnerabilities in Jetbrains Hub, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-31901jetbrainshub
EPSS score0.86%
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.CVE-2021-36209jetbrainshubEPSS score1.03%
In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.CVE-2021-25757jetbrainshubEPSS score0.64%
In JetBrains Hub before 2020.1.12629, an open redirect was possible.CVE-2021-25759jetbrainshubEPSS score0.73%
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.CVE-2021-25760jetbrainshubEPSS score0.86%
In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.CVE-2021-37540jetbrainshubEPSS score0.66%
In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.CVE-2021-37541jetbrainshubEPSS score0.55%
In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.CVE-2021-43183jetbrainshubEPSS score1.18%
In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.CVE-2021-43181jetbrainshubEPSS score0.58%
In JetBrains Hub before 2021.1.13690, stored XSS is possible.CVE-2021-43180jetbrainshubEPSS score1.00%
In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.CVE-2021-43182jetbrainshubEPSS score0.96%
In JetBrains Hub before 2021.1.13415, a DoS via user information is possible.CVE-2025-24456jetbrainshubEPSS score0.29%
In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mappingCVE-2025-64682jetbrainshubEPSS score0.17%
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limitCVE-2025-64683jetbrainshubEPSS score0.22%
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users APICVE-2025-64681jetbrainshubEPSS score0.20%
In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitationsCVE-2020-11691jetbrainshubEPSS score0.87%
In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.CVE-2022-48477jetbrainshubEPSS score0.48%
In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missingCVE-2022-48429jetbrainshubEPSS score0.60%
In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possibleCVE-2022-25262jetbrainshubEPSS score1.44%
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.CVE-2022-25260jetbrainshubEPSS score2.39%
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).