CVE-2021-25759: JetBrains Hub

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.

Affected products

• JetBrains Hub: before 2020.1.12629 (fixed in 2020.1.12629)

Published 2021-02-03. Last modified 2026-06-17.