CVE-2024-4142

published 2024-05-01

CVE-2024-4142: An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory. Due to this vulnerability…

Priority P3 53 critical 9 CVSS 3.1

AV N AC H PR N UI N S C C H I H A H

An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory.

Due to this vulnerability, users with low privileges may gain administrative access to the system.

This issue can also be exploited in Artifactory platforms with anonymous access enabled.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
jfrog	artifactory	< 7.84.6	7.84.6
jfrog	artifactory	< 7.77.11	7.77.11
jfrog	artifactory	< 7.68.21	7.68.21
jfrog	artifactory	< 7.63.21	7.63.21
jfrog	artifactory	< 7.59.22	7.59.22
jfrog	artifactory	< 7.55.17	7.55.17
jfrog	artifactory	>= 0 < 7.71.21	7.71.21

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20