Description
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.
Remediation
References
Related Vulnerabilities
WordPress Plugin Import and export users and customers Cross-Site Request Forgery (1.14.1.3)
MySQL CVE-2024-21230 Vulnerability (CVE-2024-21230)
WordPress Plugin SendPress Newsletters Unspecified Vulnerability (1.7.6.11)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-27912)