Skip to content
OpenAdvisories
Medium · 4.9 CVE-2021-46687 EUVD-2021-33358GHSA-3f45-mmr7-7f4p

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API.…

Published Jul 6, 2022 · Updated Aug 4, 2024 · Assigned by JFROG

Description

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Affected products

VendorProductAffectedFixed
JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 – < 7.x, JFrog Artifactory versions before 6.23.38 – < 6.x 7.x

References