CVE-2021-36209

Critical

In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

mitre·CWE-640·Published 2021-08-06

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

90 chars

In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

NVDen

90 chars

In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

NVDes

139 chars

En JetBrains Hub versiones anteriores a 2021.1.13389, era posible la toma de control de la cuenta durante el restablecimiento de contraseña

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H