CVE-2022-48477 - In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

Back Back to CVE browser

CRITICAL

In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

Published Apr 24, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.48%

Description

In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

Affected products

Vendor JetBrains Product Hub Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2023.1.15725

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

JetBrains

Hub

unaffected

Version	Status	Constraints
0	affected	<2023.1.15725

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (1)

https://www.jetbrains.com/privacy-security/issues-fixed/
Vendor Advisory

Link	Providers	Tags
https://www.jetbrains.com/privacy-security/issues-fixed/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner JetBrains

Published Apr 24, 2023

Updated Feb 4, 2025

Reserved Apr 24, 2023

Link CVE-2022-48477

CISA Vulnrichment

Updated Feb 4, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-48477

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-48477