JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform
CVE-2023-42508

6.5MEDIUM

Key Information:

Vendor

Jfrog

Status
Artifactory
Vendor
CVE Published:
3 October 2023

What is CVE-2023-42508?

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.

Affected Version(s)

Artifactory 7.0.0 < 7.66.0

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.