Description

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

Remediation

References

CVE-2026-42017

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5342)

Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2018-14478)

WordPress Plugin WP Support Plus Responsive Ticket System Security Bypass (7.1.4)

osTicket Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-4634)

WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2026-42017