Back to Database
Status published
Critical
CVE-2024-6915
JFrog Artifactory Cache Poisoning
Vulnerability Description
JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6915
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Michael Stepankin (artsploit) from GitHub Security Lab
More from JFrog
View All →CVE-2025-14830
JFrog Artifactory Cross-Site Scripting
Medium
4.9
CVE-2024-4142
JFrog Artifactory Improper input validation within token creation flow
Critical
9
CVE-2024-3505
JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
Medium
4.3
CVE-2024-2248
JFrog Artifactory Header Injection
Medium
6.4
CVE-2024-2247
JFrog Artifactory Cross-Site Scripting
High
8.8
Affected Vendor
JFrog
View all reports →Affected Software
Artifactory
Vulnerable Versions:
0
Timeline
Official Publish:
August 5th, 2024
Last Modified:
August 6th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L