Vulnerabilidades en JFrog
64 resultadosAnálisis Vexday
JFrog apresenta 20 CVEs catalogadas, com 3 classificadas como críticas, mas nenhuma sob ataque ativo conhecido (KEV = 0) e nenhuma publicação nos últimos 90 dias, indicando risco estável. A fraqueza dominante é validação inadequada de entrada (CWE-20), típica de falhas de controle de dados que requerem monitoramento contínuo. O panorama sugere vulnerabilidades legadas sem exploração em massa, reduzindo urgência de remediação imediata, embora as críticas demandem avaliação de impacto.
CVE-2021-45730MEDIUMJFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete RepositoEPSS 0.5%CVE-2026-69106HIGHPotential cache poisoning in JFrog ArtifactoryEPSS 0.5%CVE-2026-42017HIGHPrivilege escalation via JFrog Worker event token exposureEPSS 0.5%CVE-2026-68752HIGHProject Resource Managers may escalate privileges in JFrog ArtifactoryEPSS 0.5%CVE-2023-42662CRITICALJFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access TokensEPSS 0.5%CVE-2026-68756MEDIUMPotential insecure deserialization in JFrog ArtifactoryEPSS 0.5%CVE-2024-2247HIGHJFrog Artifactory Cross-Site ScriptingEPSS 0.5%CVE-2026-68760MEDIUMPotential remember-me authentication bypass in JFrog ArtifactoryEPSS 0.5%CVE-2023-42509MEDIUMJFrog Artifactory Sensitive Data Leakage in Repository configuration processEPSS 0.4%CVE-2026-65924MEDIUMServer-Side Request Forgery (SSRF) via Terraform Remote repositoryEPSS 0.4%CVE-2024-3505MEDIUMJFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege usersEPSS 0.4%CVE-2026-69107MEDIUMPotential unauthorized artifact access in JFrog ArtifactoryEPSS 0.4%CVE-2023-42508MEDIUMJFrog Artifactory Improper header input validation leads to email manipulation sent from the platformEPSS 0.4%CVE-2026-66375HIGHLow-privilege users may remove protected Artifactory metadataEPSS 0.4%CVE-2026-66018MEDIUMJFrog Artifactory build environment properties exposureEPSS 0.4%CVE-2026-66381MEDIUMRepository readers may access content outside configured upstream pathsEPSS 0.4%CVE-2026-65616HIGHPotential privilege escalation to JFrog administrator privilegesEPSS 0.4%CVE-2026-66377MEDIUMAnonymous users may access restricted Artifactory repository informationEPSS 0.4%CVE-2021-23163LOWJFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issuEPSS 0.4%CVE-2026-70550MEDIUMPotential unauthorized access to private Composer repository metadata in JFrog ArtifactoryEPSS 0.4%