CVE-2022-24327 Information disclosure in n/a

What is CVE-2022-24327?

CVE-2022-24327 is a high-severity vulnerability in n/a, published on 25 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.

Weakness: CWE-732

Which versions are affected by CVE-2022-24327?

It affects 1 product.

Products include Jetbrains Hub.

How do I fix CVE-2022-24327?

No fix has been published for CVE-2022-24327 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24327 being exploited?

There is no known exploitation of CVE-2022-24327 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2026-50242 Auth bypass in Hub Critical 10.0
• CVE-2026-56141 Weak cryptography in Hub Critical 9.8
• CVE-2022-25262 Auth bypass in n/a Critical 9.8
• CVE-2021-43183 Security feature bypass in n/a Critical 9.8
• CVE-2021-36209 Auth bypass in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cm93-88xh-rg58.