CVE-2024-2248CWE-20

JFrog Artifactory Header Injection

Medium · published May 15, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-05-15T13:13Z
EPSS history
Timeline
  • 15 MAY 13:13Z
    JFrog Artifactory Header Injection
    cvelistv5