PT-2022-12902 · Jfrog · Jfrog Artifactory

Name of the Vulnerable Software and Affected Versions: JFrog Artifactory versions prior to 7.31.10 JFrog Artifactory versions prior to 6.23.38 Description: The issue affects JFrog Artifactory, where sensitive data exposure can occur through the Project Administrator REST API. Recommendations: For...

PT-2022-12372 · Jfrog · Jfrog Artifactory

Name of the Vulnerable Software and Affected Versions: JFrog Artifactory versions prior to 7.29.8 JFrog Artifactory versions prior to 6.23.38 Description: The issue is related to Reflected Cross-Site Scripting XSS through one of the XHR parameters in the "Users REST API endpoint". Recommendations...