Skip to content
OpenAdvisories

Product · JetBrains

Hub

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-123297

    In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow

    JetBrains Hub
  • Medium 5.0
    CVE-2026-123298

    In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible

    JetBrains Hub
  • Medium 6.8
    CVE-2026-32229

    In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled

    JetBrains Hub
  • Medium 5.3
    CVE-2025-64683

    In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API

    JetBrains Hub
  • Medium 6.7
    CVE-2025-24456

    In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping

    JetBrains Hub
  • Medium 4.3
    CVE-2024-50573

    In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorize…

    JetBrains Hub
  • Medium 4.1
    CVE-2022-48477

    In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

    JetBrains Hub
  • Medium 4.6
    CVE-2022-48429 Public exploit

    In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

    JetBrains Hub
  • Medium 6.1
    CVE-2022-29811

    In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.

    JetBrains Hub