Lucene search
HistoryMay 15, 2024 - 1:15 p.m.
CVE-2024-2248
jfrog
saas
self-hosted
header injection
account takeover
url crafted
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
EPSS
0
Percentile
9.0%
A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user’s account when clicking on a specially crafted URL sent to the victim’s user email.
Related
vulnrichment
vulnrichment
CVE-2024-2248 JFrog Artifactory Header Injection
2024-05-15 13:13:29
cve
cve
CVE-2024-2248
2024-05-15 13:15:26
osv
osv
BIT-artifactory-2024-2248
2024-05-29 10:40:32
cvelist
cvelist
CVE-2024-2248 JFrog Artifactory Header Injection
2024-05-15 13:13:29
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-2248