Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-0668 EUVD-2022-15757GHSA-gr7v-4xrc-fqr5

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted …

Published Jan 8, 2023 · Updated Apr 9, 2025 · Assigned by JFROG

Vendor: jfrog Product: JFrog Artifactory

Description

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.

Affected products

VendorProductAffectedFixed
JFrog JFrog Artifactory JFrog Artifactory versions before 7.x – < 7.37.13, JFrog Artifactory versions before 6.x – < 6.23.41 7.37.13

Advisories 1

References