CVE-2024-2248mediumCWE-20

CVE-2024-2248: falha de média gravidade em JFrog Artifactory

JFrog Artifactory Header Injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar artifactory

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 0.3%
A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
Produtos afetados
JFrog · Artifactory
CVEs relacionadas — JFrog Artifactory

No mesmo produto, das mais perigosas para as menos.

CVE-2023-42661HIGHJFrog Artifactory Improper input validation leads to arbitrary file writeEPSS 0.9%CVE-2024-4142CRITICALJFrog Artifactory Improper input validation within token creation flowEPSS 0.7%CVE-2024-6915CRITICALJFrog Artifactory Cache PoisoningEPSS 0.6%CVE-2021-41834MEDIUMCVE-2021-41834EPSS 0.6%CVE-2021-45730MEDIUMCVE-2021-45730EPSS 0.6%CVE-2023-42508MEDIUMJFrog Artifactory Improper header input validation leads to email manipulation sent from the platformEPSS 0.5%