JFrog Artifactory Vulnerability: User Access Tokens at Risk

CVE-2023-42662

What is CVE-2023-42662?

Versions of JFrog Artifactory from 7.59 to below 7.59.18, including 7.63.18, 7.68.19, and 7.71.8, exhibit a vulnerability where user access tokens may be exposed. This occurs through improper handling of specially crafted URLs that involve user interaction with the command-line interface (CLI) or integrated development environment (IDE) browser-based SSO solutions. The flawed SSO integration poses a risk of unauthorized access if malicious URLs are utilized, thus necessitating immediate attention to safeguard user credentials.

References