Jetbrains: >> Hub >> 2024.2.34646 Security Vulnerabilities
In JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 account takeover via predictable restore codes was possible
CVSS Score
9.8
EPSS Score
0.005
Published
2026-06-19
In JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 privilege escalation by attaching authentication details to accounts was possible
CVSS Score
9.9
EPSS Score
0.006
Published
2026-06-19
In JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
CVSS Score
10.0
EPSS Score
0.006
Published
2026-06-19
In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled
CVSS Score
6.8
EPSS Score
0.002
Published
2026-03-11
In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible
CVSS Score
9.1
EPSS Score
0.004
Published
2026-02-09
In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations
CVSS Score
2.7
EPSS Score
0.002
Published
2025-11-10
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit
CVSS Score
2.7
EPSS Score
0.002
Published
2025-11-10
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API
CVSS Score
5.3
EPSS Score
0.002
Published
2025-11-10
In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping
CVSS Score
6.7
EPSS Score
0.003
Published
2025-01-21
In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services
CVSS Score
4.3
EPSS Score
0.002
Published
2024-10-28
Page 1