CVE-2024-2247

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-2247
JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories Vendor Advisory
https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*
History

27 Feb 2025, 03:06

Type Values Removed Values Added
CWE CWE-79
References () https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories - () https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories - Vendor Advisory
First Time Jfrog artifactory
Jfrog
CPE cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1

14 Mar 2024, 10:15

Type Values Removed Values Added
Summary JFrog Artifactory versions below 7.77.7, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism. JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.

13 Mar 2024, 14:28

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-13 14:15

Updated : 2025-02-27 03:06

NVD link : CVE-2024-2247

Mitre link : CVE-2024-2247

JSON object : View

Products Affected

jfrog

  • artifactory
CWE

No CWE.