| Package | Affected versions | Patched versions |
|---|---|---|
| artifactory | = 7.35.0= 7.36.0≥ 6.0.0, < 6.23.41≥ 7.0.0, < 7.17.16≥ 7.18.0, < 7.18.12≥ 7.19.0, < 7.19.13≥ 7.21.0, < 7.21.25≥ 7.25.0, < 7.25.9≥ 7.27.0, < 7.27.15≥ 7.29.0, < 7.29.10≥ 7.31.0, < 7.31.16≥ 7.33.0, < 7.33.12≥ 7.34.0, < 7.34.4 | 6.23.417.17.167.18.127.19.137.21.257.25.97.27.157.29.107.31.167.33.127.34.4 |
JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free