In JetBrains Hub prior to 2021.1.13389, account takeover was possible during password reset.
jetbrains hub