Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-42509

JFrog Artifactory Sensitive Data Leakage in Repository configuration process

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JFrog Artifactory

Default version status: unknown

  • 7.17.4 to < 7.77.0affected

References