PT-2023-15773 · Jetbrains · Jetbrains Hub

Published 2023-03-27 · Updated 2023-03-30 · CVE-2022-48429

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2022.3.15573 JetBrains Hub version 2022.2.15572 JetBrains Hub version 2022.1.15583

Description The issue is related to reflected XSS in dashboards.

Recommendations For versions prior to 2022.3.15573, update to version 2022.3.15573 or later. For version 2022.2.15572, update to version 2022.3.15573 or later. For version 2022.1.15583, update to version 2022.3.15573 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-48429

Affected Products

Jetbrains Hub

References · 5

• https://osv.dev/vulnerability/CVE-2022-48429 · Vendor Advisory
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48429 · Security Note
• https://t.me/cibsecurity/60817 · Telegram Post
• https://t.me/cvenotify/47192 · Telegram Post