NetSight
IP …
high8.8

CVE-2021-3860

JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete v…

Impact

JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query.

Affected products

VendorProductAffected versions
JfrogArtifactory
before 6.23.30
from 7.11.0 before 7.11.8
from 7.12.0 before 7.12.10
from 7.17.0 before 7.17.14
from 7.18.0 before 7.18.11
from 7.19.0 before 7.19.12

Weakness classification

CWE-89

References