PT-2025-46152 · Jetbrains · Jetbrains Hub

Published 2025-11-10 · Updated 2025-11-21 · CVE-2025-64683

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2025.3.104432

Description An information disclosure issue exists in JetBrains Hub. This allows for the potential disclosure of information via the Users API. The API endpoint involved is the Users API.

Recommendations Update JetBrains Hub to version 2025.3.104432 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2025-14897

CVE-2025-64683

Affected Products

Jetbrains Hub

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-64683 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14897 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64683 · Vendor Advisory
• https://t.me/cveNotify/143598 · Telegram Post
• https://t.me/CVEtracker/36912 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1987914685451018694 · Twitter Post
• https://cybersecurity-help.cz/vulnerabilities/118238 · Note
• https://t.me/cveNotify/142267 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2025111107 · Note
• https://twitter.com/CVEnew/status/1987879096148259007 · Twitter Post