CVEvulnerability

CVE-2023-42662

6.5 MEDIUM Published 2024-03-07 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-287

Description

JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.

Affected configurations

• jfrog artifactory (>= 7.59.0 < 7.59.18) • jfrog artifactory (>= 7.63.5 < 7.63.18) • jfrog artifactory (>= 7.68.7 < 7.68.19) • jfrog artifactory (>= 7.71.2 < 7.71.8)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References