CVE-2024-6915

JFrog Artifactory Cache Poisoning

State: Published
Severity: 9.3 Critical
Published: Aug 5, 2024
Updated: Aug 6, 2024
Reserved: Jul 19, 2024

Description

JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.

Scores

CVSS	Score	Vector	Source
3.1	9.3 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L	JFROG

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
ArtifactoryJFrog	before 7.90.6Affected before 7.84.20Affected before 7.77.14Affected before 7.71.23Affected before 7.68.22Affected before 7.63.22Affected before 7.59.23Affected before 7.55.18Affected

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.