Description
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Hub | 2022.1.14638 – < 2022.1.14638 | 2022.1.14638 |
Medium · 6.1
CVE-2022-29811
EUVD-2022-34131GHSA-g5m9-8h5w-cxvx
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.
Published Apr 28, 2022 · Updated Aug 3, 2024 · Assigned by JetBrains