Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-42508

JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JFrog Artifactory

Default version status: unknown

  • 7.0.0 to < 7.66.0affected

References