EUVD-2026-49574
GHSA-7vcf-q5x4-fq9r
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Requires authentication (PR:L), but network accessible; high confidentiality impact on internal services.
Primary rating from Vendor (JFROG).
CVSS VectorVendor: JFROG
Lifecycle Timeline
3DescriptionCVE.org
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.
AnalysisAI
Server-side request forgery (SSRF) in JFrog Artifactory allows authenticated attackers to make unauthorized requests to internal services, potentially exposing internal network resources and cached response data. The vulnerability arises from improper URL validation when handling specific URLs. No public exploit or active exploitation has been identified at the time of analysis, and the CVSS score of 6.5 reflects moderate risk with a requirement for authentication.
Technical ContextAI
This vulnerability is a Server-Side Request Forgery (SSRF) classified under CWE-918. Artifactory is a binary repository manager used to store and manage artifacts, and it often integrates with remote repositories and proxy configurations. The CPE string cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:* indicates all versions are potentially affected. SSRF occurs when an application fails to properly validate user-supplied URLs, allowing an attacker to force the server to make requests to arbitrary internal or external destinations, which can lead to information disclosure.
RemediationAI
The primary remediation is to upgrade JFrog Artifactory to the latest patched version as per the vendor advisory at https://docs.jfrog.com/releases/docs/jfrog-security-advisories. Since an exact fix version is not specified in the available data, check the advisory for version details. As a workaround, restrict outbound network access from Artifactory to only necessary internal services, implement network segmentation, and review Artifactory's remote repository configurations to limit URL inputs. Ensure that authenticated users are trusted and monitor for unusual outbound requests.
More in Artifactory
View allAuthentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi
Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage
JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that
Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository
Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser
Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today