Description
JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JFrog | Artifactory | 7.0.0 – < 7.66.0 | 7.66.0 |
Advisories 1
- WID-SEC-2023-2536 JFrog Artifactory: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Oct 3, 2023