CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-02-25

Last modified

2024-08-03

Weaknesses

CWE-732

Affected products

• Hub (Jetbrains)

References

• https://blog.jetbrains.com
• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/