In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.Referenceshttps://blog.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/