WID-SEC-W-2024-0584

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

JFrog Artifactory: Mehrere Schwachstellen

view advisory published 2024-03-07

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder beliebigen Programmcode auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-42661UShigh8.8—
JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of…
CVE-2023-42509UShigh7.5—
JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration in…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan