Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: JFrog Artifactory 6.x, 7.x Clear all filters
TI-2021-05942 CVE-2021-23163 · GHSA-63vv-f5j8-wjcr

Cross-site request forgery in JFrog Artifactory

Priority LOW 38

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0036 Published 2022-07-06 Fixed in 7.x, 6.x CWE-352
TI-2021-21450 CVE-2021-46687 · GHSA-3f45-mmr7-7f4p

Exposure of resource to wrong sphere in JFrog Artifactory

Priority LOW 24

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00869 Published 2022-07-06 Fixed in 7.x, 6.x CWE-359