Description
JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JFrog | Artifactory | < 7.77.7, < 7.82.1 | 7.77.7 |
Advisories 1
- WID-SEC-2024-0628 JFrog Artifactory: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Nov 24, 2024