Back to Database
Status published
High
CVE-2023-42661
JFrog Artifactory Improper input validation leads to arbitrary file write
Vulnerability Description
JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-42661
Credits & Attribution
No credits recorded in the NVD database.
More from JFrog
View All →CVE-2025-14830
JFrog Artifactory Cross-Site Scripting
Medium
4.9
CVE-2024-6915
JFrog Artifactory Cache Poisoning
Critical
9.3
CVE-2024-4142
JFrog Artifactory Improper input validation within token creation flow
Critical
9
CVE-2024-3505
JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
Medium
4.3
CVE-2024-2248
JFrog Artifactory Header Injection
Medium
6.4
Affected Vendor
JFrog
View all reports →Affected Software
Artifactory
Vulnerable Versions:
0
Timeline
Official Publish:
March 7th, 2024
Last Modified:
August 16th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H