📦 Artifactory

This vulnerability allows unauthorized network-based attackers to gain administrative access to Jfrog Artifactory instances by exploiting default passwords like 'password' that are not required to be ...

This DOM-based cross-site scripting vulnerability in JFrog Artifactory allows attackers to inject malicious scripts that execute in users' browsers when they interact with the import override mechanis...

CVE-2023-42661 allows authenticated users to write arbitrary files to JFrog Artifactory servers by sending specially crafted requests with insufficiently validated artifacts. This can lead to denial o...

CVE-2021-3860 is a blind SQL injection vulnerability in JFrog Artifactory Enterprise+ deployments that allows low-privileged authenticated users to execute arbitrary SQL queries. This can lead to data...