In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
CWE-357