PT-2025-46152 · Jetbrains · Jetbrains Hub

CVE-2025-64683 · Publicado 2025-11-10 · Atualizado 2025-11-21

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2025.3.104432

Description An information disclosure issue exists in JetBrains Hub. This allows for the potential disclosure of information via the Users API. The API endpoint involved is the Users API.

Recommendations Update JetBrains Hub to version 2025.3.104432 or later.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

BDU:2025-14897

CVE-2025-64683

Produtos afetados

Jetbrains Hub

Referências · 11

• https://t.me/cveNotify/143598 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-64683 · Nota de Segurança
• https://jetbrains.com/privacy-security/issues-fixed · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-14897 · Nota de Segurança
• https://t.me/CVEtracker/36912 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1987914685451018694 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-64683 · Aviso do Fabricante
• https://cybersecurity-help.cz/vulnerabilities/118238 · Nota
• https://t.me/cveNotify/142267 · Publicação no Telegram
• https://cybersecurity-help.cz/vdb/SB2025111107 · Nota
• https://twitter.com/CVEnew/status/1987879096148259007 · Publicação no Twitter