CVE-2023-42662

published 2024-03-07

CVE-2023-42662: JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially…

Priority P4 32 medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C H I N A N

JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
jfrog	artifactory	>= 7.59 < 7.59.18	7.59.18
jfrog	artifactory	>= 7.59 < 7.63.18	7.63.18
jfrog	artifactory	>= 7.59 < 7.68.19	7.68.19
jfrog	artifactory	>= 7.59 < 7.71.8	7.71.8
jfrog	artifactory	>= 7.59.0 < 7.59.18	7.59.18
jfrog	artifactory	>= 7.63.5 < 7.63.18	7.63.18
jfrog	artifactory	>= 7.68.7 < 7.68.19	7.68.19
jfrog	artifactory	>= 7.71.2 < 7.71.8	7.71.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287