Vulnerabilities > Jfrog > Artifactory > 7.31.11

DATE CVE VULNERABILITY TITLE RISK
2023-10-03 CVE-2023-42508 Unspecified vulnerability in Jfrog Artifactory
JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.
network
low complexity
jfrog
6.5
2023-01-08 CVE-2022-0668 Improper Privilege Management vulnerability in Jfrog Artifactory
JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.
network
low complexity
jfrog CWE-269
critical
9.8
2022-07-06 CVE-2021-23163 Cross-Site Request Forgery (CSRF) vulnerability in Jfrog Artifactory
JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints.
network
jfrog CWE-352
6.8