WID-SEC-2026-0004 — JFrog Artifactory: Schwachstelle ermöglicht Cross-Site Scripting

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Medium 4.9

CVE-2025-14830

JFrog Artifactory Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artifactory (Workers) allows Cross-Site Scripting (XSS).This issue affects Artifactory (Workers): from >=7.94.0 through <7.117.10.

jfrog Artifactory (Workers)

Jan 4, 2026

Revision history

2026-01-04 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-01-04
https://github.com/advisories/GHSA-57VQ-6P22-FHVX
EU Vulnerability Database vom 2026-01-04
https://euvd.enisa.europa.eu/enisa/EUVD-2026-0780