CVE-2023-42661

Publication date

2024-03-07 13:56:38

Family

JFROG

State

PUBLISHED

Description

JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts.