CVE-2024-4142

JFrog Artifactory Improper input validation within token creation flow

State: Published
Severity: 9.0 Critical
Published: May 1, 2024
Updated: Aug 1, 2024
Reserved: Apr 24, 2024

Description

An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory.

Due to this vulnerability, users with low privileges may gain administrative access to the system.

This issue can also be exploited in Artifactory platforms with anonymous access enabled.

Scores

CVSS	Score	Vector	Source
3.1	9.0 Critical	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	JFROG

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
ArtifactoryJFrog	before 7.84.6Affected before 7.77.11Affected before 7.71.21Affected before 7.68.21Affected before 7.63.21Affected before 7.59.22Affected before 7.55.17Affected

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.