CVE-2023-42661CWE-20

JFrog Artifactory Improper input validation leads to arbitrary file write

High · published March 7, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00883 · 58.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-03-07T13:56Z
EPSS history
Timeline
  • 07 MAR 13:56Z
    JFrog Artifactory Improper input validation leads to arbitrary file write
    cvelistv5