THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-2248

JFrog Artifactory Header Injection

Reserved:2024-03-07
Published:2024-05-15
Updated:2024-05-15

Description

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email.



MEDIUM: 6.4CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

Problem types

CWE-20 Improper Input Validation

Product status

Default status
unaffected

Any version before 7.85.0
affected

Any version before 7.84.7
affected

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

cve.org CVE-2024-2248

nvd.nist.gov CVE-2024-2248

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-2248