CVE-2024-3505: JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read…

PriorityP419medium4.3CVSS 3.1

AVNACLPRLUINSUCLINAN

EPSS

0.41%

33.0th percentile

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
jfrog	artifactory	< 7.77.3	7.77.3
jfrog	artifactory_self-hosted	< 7.77.3	7.77.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.