Description

JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.

Remediation

References

CVE-2023-42662

Related Vulnerabilities

LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16177)

Drupal Core 5.x Arbitrary Code Execution (5.0 - 5.2)

Moodle Incorrect Authorization Vulnerability (CVE-2020-25701)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2269)

Angular Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-50170)

Severity

Medium

Classification

CVE-2023-42662 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities