JFrog Artifactory vulnerabilities

2 known vulnerabilities in JFrog Artifactory from Jfrog. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  JFrog Artifactory: Improper Privilege Management

  CVE-2022-0668Jan 8, 2023Jfrog

  JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.

• 8.8 High severity

  JFrog Artifactory: Deserialization of Untrusted Data

  CVE-2022-0573May 16, 2022JfrogEPSS 2.12%

  JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due t