JFrog Artifactory vulnerability: Sensitive data exposure due to improper exception handling

CVE-2023-42509

What is CVE-2023-42509?

A vulnerability exists in JFrog Artifactory versions from 7.17.4 to 7.77.0, which arises from a sequence of improperly handled exceptions during the initialization of repository configurations. This flaw can potentially expose sensitive data, creating risks for organizations utilizing affected versions of the product. Users are encouraged to review their configurations and upgrade to supported versions to mitigate potential exposure of sensitive information.

References