DeutschShown in its original language — a full translation is planned for a future version.
JFrog Artifactory: Mehrere Schwachstellen
view advisory published 2022-09-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.
01
describes (99)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-38561US | high7.5 | — | ||
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing un… | ||||
| CVE-2021-3859US | high7.5 | — | ||
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks… | ||||
| CVE-2022-32223US | high7.3 | Exploit | ||
Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following depe… | ||||
| CVE-2022-32215US | medium6.5 | — | ||
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smug… | ||||
| CVE-2022-32214US | medium6.5 | — | ||
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Sm… | ||||
| CVE-2022-32213US | medium6.5 | — | ||
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smugg… | ||||
| CVE-2022-32212US | high8.1 | — | ||
A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddre… | ||||
| CVE-2022-24823US | medium5.5 | — | ||
Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix… | ||||
| CVE-2021-22573US | high7.3 | — | ||
The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not fr… | ||||
| CVE-2022-29153US | high7.5 | — | ||
HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health… | ||||
| CVE-2022-22963US | critical9.8OT critical | KEV | ||
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r… | ||||
| CVE-2022-24769US | medium5.9 | — | ||
Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where contain… | ||||
| CVE-2022-27191US | high7.5OT elevated | — | ||
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey. | ||||
| CVE-2020-36518US | high7.5 | Exploit | ||
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | ||||
| CVE-2022-23648US | high7.5 | Exploit | ||
containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched… | ||||
| CVE-2022-23632US | high7.5 | — | ||
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security (TLS) configuration when the host header is a fully qu… | ||||
| CVE-2022-23806US | critical9.1 | — | ||
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. | ||||
| CVE-2022-0536US | medium5.9 | — | ||
Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. | ||||
| CVE-2021-22060US | medium4.3 | — | ||
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of addition… | ||||
| CVE-2021-42550US | medium6.6 | — | ||
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitra… | ||||
showing 20 of 99
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:6782 vom 2022-10-04external
- Red Hat Security Advisory RHSA-2023:5165 vom 2023-09-14external
- SUSE Security Update SUSE-SU-2025:03545-1 vom 2025-10-13external
- Ubuntu Security Notice USN-5776-1 vom 2022-12-13external
- WID-SEC-W-2022-1375 - CSAF Versionself
- WID-SEC-2022-1375 - Portal Versionself
- JFrog Fixed Security Vulnerabilities vom 2022-09-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan