Skip to content
OpenAdvisories
Medium · 6.6 CVE-2023-42509 EUVD-2023-46942GHSA-3ccw-6p8h-92ch

JFrog Artifactory Sensitive Data Leakage in Repository configuration process

Published Mar 7, 2024 · Updated Aug 2, 2024 · Assigned by JFROG

Description

JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data.

Affected products

VendorProductAffectedFixed
JFrog Artifactory 7.17.4 – < 7.77.0 7.77.0

Advisories 1

References