CVE-2026-65924

6.5 Moyenne

Publiée le 27/07/2026 à 22:16 · Modifiée le 30/07/2026 à 16:44 · Analysée par le NVD · Source : reefs@jfrog.com

Description

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary destinations and receive the response content.

Traduire en français

Produits concernés

jfrog artifactory

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	reefs@jfrog.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases Release Notes
https://docs.jfrog.com/releases/docs/jfrog-security-advisories Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories