CVE-2023-42508 — JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform

CVE-2023-42508

JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform PUBLISHED

Description (CNA)

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body.

Affected (CNA)

Vendor / product	Versions
JFrog / Artifactory	affected 7.0.0 before 7.66.0

CWE

CWE-20

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

ADP enrichment

CVE

No English description supplied.

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

CISA-ADP

No English description supplied.

No references supplied.