Unrated severityNVD Advisory· Published Mar 13, 2024· Updated Aug 1, 2024

JFrog Artifactory Cross-Site Scripting

CVE-2024-2247

Description

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.

Affected products

osv-coords
pkg:bitnami/artifactory
Range: < 7.77.7
JFrog/Artifactoryv5
Range: 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jfrog.com/help/r/jfrog-release-information/jfrog-security-advisoriesmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000