High WID-SEC-2024-0628 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 13, 2024 · Updated Nov 24, 2024 · Revision 2 · de-DE

Vendor: jfrog Product: artifactory Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

High 8.8

CVE-2024-2247

JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.

jfrog artifactory

Mar 13, 2024

Revision history

2024-11-24 #2
Produktzuordnung überprüft
2024-03-13 #1
Initiale Fassung

References

JFrog Security Advisory vom 2024-03-13
https://jfrog.com/help/r/jfrog-release-information/cve-2024-2247-jfrog-artifactory-cross-site-scripting
GitHub Advisory Database vom 2024-03-13
https://github.com/advisories/GHSA-gqg8-h7gm-47hq