CVE-2022-24328 Denial of service in n/a

What is CVE-2022-24328?

CVE-2022-24328 is a medium-severity denial of service vulnerability in n/a, published on 25 Feb 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.

Which versions are affected by CVE-2022-24328?

It affects 1 product.

Products include Jetbrains Hub.

How do I fix CVE-2022-24328?

No fix has been published for CVE-2022-24328 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2022-24328 being exploited?

There is no known exploitation of CVE-2022-24328 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2026-50242 Auth bypass in Hub Critical 10.0
• CVE-2026-56141 Weak cryptography in Hub Critical 9.8
• CVE-2022-25262 Auth bypass in n/a Critical 9.8
• CVE-2021-43183 Security feature bypass in n/a Critical 9.8
• CVE-2021-36209 Auth bypass in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hh4r-8h4c-83j4.