Medium WID-SEC-2023-2536 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Manipulation von Dateien

Published Oct 3, 2023 · Updated Oct 3, 2023 · de-DE

Vendor: jfrog Product: Artifactory < 7.66.0 Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um Dateien zu manipulieren.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Medium 6.5

CVE-2023-42508

JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.

jfrog artifactory

Oct 3, 2023

Revision history

2023-10-03 #1
Initiale Fassung

References

JFrog Security Bulletin vom 2023-10-03
https://github.com/advisories/GHSA-mp3m-h3mq-83jw
JFrog Security Bulletin vom 2023-10-03
https://nvd.nist.gov/vuln/detail/CVE-2023-42508