PT-2022-19844 · Jetbrains · Jetbrains Hub

Julian Muñoz · Published 2022-04-28 · Updated 2022-05-05 · CVE-2022-29811

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2022.1.14638

Description The issue allows for stored XSS via project icon.

Recommendations For versions prior to 2022.1.14638, update to version 2022.1.14638 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-29811

Affected Products

Jetbrains Hub

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-29811 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29811 · Vendor Advisory
• https://t.me/cibsecurity/41548 · Telegram Post
• https://t.me/cvenotify/29741 · Telegram Post
• https://t.me/cvenotify/29446 · Telegram Post