Medium WID-SEC-2024-1157 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Codeausführung

Published May 15, 2024 · Updated May 15, 2024 · de-DE

Vendor: jfrog Product: artifactory Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um beliebigen Programmcode auszuführen.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Medium 6.4

CVE-2024-2248

JFrog Artifactory Header Injection

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email.

jfrog artifactory

May 15, 2024

Revision history

2024-05-15 #1
Initiale Fassung

References

JFrog Security Advisories vom 2024-05-15
https://jfrog.com/help/r/booxtVWM8HjIoXm7gJVD9A/CQ2YsXB4L2Uc1Ste0ypUWg
Github Database
https://github.com/advisories/GHSA-x6f5-334p-gh98