SSRF Vulnerability in JetBrains Hub's Authentication Module
CVE-2022-48477

4.1MEDIUM

Key Information:

Vendor
Jetbrains
Status
Hub
Vendor
CVE Published:
24 April 2023

Summary

The JetBrains Hub's authentication module prior to version 2023.1.15725 lacks proper protection against Server-Side Request Forgery (SSRF) attacks. This oversight could allow an attacker to send unauthorized requests from the server to internal services. Organizations using affected versions of JetBrains Hub should update to the latest version to mitigate potential security risks.

Affected Version(s)

Hub 0 < 2023.1.15725

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.