Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-42661

JFrog Artifactory Improper input validation leads to arbitrary file write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JFrog Artifactory

Default version status: unknown

  • 0 to < 7.76.2affected

References