CVE-2025-14830 — Cross-site Scripting in Artifactory

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.0%
top 86.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jfrog Artifactory
Timeline
PublishedJan 4

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artifactory (Workers) allows Cross-Site Scripting (XSS).This issue affects Artifactory (Workers): from >=7.94.0 through <7.117.10.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages1 packages

▶CVEListV5jfrog/artifactory>=7.94.0 — <7.117.10

🔴Vulnerability Details

2
CVEList
JFrog Artifactory Cross-Site Scripting↗2026-01-04
▶
GHSA
GHSA-57vq-6p22-fhvx: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artifactory (Workers) allows Cross-↗2026-01-04
▶
CVE-2025-14830 — Cross-site Scripting in Artifactory | cvebase