CVE-2022-25262

Critical

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

mitre·CWE-345·Published 2022-02-25

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

73 chars

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

NVDen

73 chars

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

NVDes

106 chars

En JetBrains Hub versiones anteriores a 2022.1.14434, era posible la toma de posesión de peticiones SAML.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H