pentester.land· May 3, 2022· by Yurii Sanin (@SaninYurii)🔍 CVE-2022-25262

CVE-2022-25262 | JetBrains Hub single-click SAML response takeover

Target Program: JetBrains

🎯 Vulnerability: OAuth 2.0 / JWT Authentication Bypass

💡 Defense Fix: Strictly verify JWT signatures on the backend, enforce state parameter validation, and reject 'alg: none'.

#Broken authorization#SAML#OAuth#CVE-2022-25262