CVE-2022-0573CWE-502

JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote…

High · published May 16, 2022

CVSS v3.1
8.8
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02121 · 81.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-05-16T14:32Z
EPSS history
Timeline
  • 16 MAY 14:32Z
    JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote…
    cvelistv5