CVE-2022-48429

published 2023-03-27

CVE-2022-48429: In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

Priority P4 21 medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

Affected

4 ranges

Vendor	Product	Version range	Fixed in
jetbrains	hub	< 2022.3.15573, 2022.2.15572, 2022.1.15583	2022.3.15573, 2022.2.15572, 2022.1.15583
jetbrains	hub	< 2022.1.15583	2022.1.15583
jetbrains	hub	>= 2022.2 < 2022.2.15572	2022.2.15572
jetbrains	hub	>= 2022.3 < 2022.3.15573	2022.3.15573

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79