Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-3505 EUVD-2024-32091GHSA-gfcp-9pcc-558h

JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users

Published Apr 15, 2024 · Updated Aug 1, 2024 · Assigned by JFROG

Description

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration.
This does not affect JFrog cloud deployments.

Affected products

VendorProductAffectedFixed
JFrog Artifactory Self-Hosted < 7.77.3 7.77.3

Advisories 1

References