Exposure of Artifactory

Development

11

exposure score

4

sites use

0

exploited

4

critical

CVEs

11 results

CVE-2019-17444CRITICALJFrog Artifactory does not enforce default admin password changeEPSS 69.4%CVE-2023-42661HIGHJFrog Artifactory Improper input validation leads to arbitrary file writeEPSS 0.9%CVE-2024-4142CRITICALJFrog Artifactory Improper input validation within token creation flowEPSS 0.7%CVE-2024-6915CRITICALJFrog Artifactory Cache PoisoningEPSS 0.6%CVE-2021-41834MEDIUMJFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-pEPSS 0.5%CVE-2024-2247HIGHJFrog Artifactory Cross-Site ScriptingEPSS 0.5%CVE-2021-45730MEDIUMJFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete RepositoEPSS 0.5%CVE-2023-42662CRITICALJFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access TokensEPSS 0.5%CVE-2023-42509MEDIUMJFrog Artifactory Sensitive Data Leakage in Repository configuration processEPSS 0.4%CVE-2023-42508MEDIUMJFrog Artifactory Improper header input validation leads to email manipulation sent from the platformEPSS 0.4%CVE-2024-2248MEDIUMJFrog Artifactory Header InjectionEPSS 0.3%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →