Skip to content
OpenAdvisories
Low · 3.1 CVE-2021-23163 EUVD-2021-10274GHSA-63vv-f5j8-wjcr

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This iss…

Published Jul 6, 2022 · Updated Aug 3, 2024 · Assigned by JFROG

Description

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Affected products

VendorProductAffectedFixed
JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 – < 7.x, JFrog Artifactory versions before 6.23.38 – < 6.x 7.x

References