Description
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jfrog | artifactory | < 7.133.6 | 7.133.6 |
Advisories 2
- WID-SEC-2026-2548 JFrog Artifactory: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 13, 2026
- NCSC-2026-0272 Kwetsbaarheden verholpen in JFrog Artifactory NCSC-NL (Netherlands) · Jul 31, 2026
References
- https://docs.jfrog.com/releases/docs/jfrog-security-advisories vendor-advisory
- https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases vendor-advisory