{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T03:53:22.266","vulnerabilities":[{"cve":{"id":"CVE-2023-42662","sourceIdentifier":"reefs@jfrog.com","published":"2024-03-07T09:15:38.290","lastModified":"2025-03-11T16:40:52.237","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.\n"},{"lang":"es","value":"Las versiones de JFrog Artifactory 7.59 y superiores, pero inferiores a 7.59.18, 7.63.18, 7.68.19, 7.71.8 son vulnerables a un problema por el cual la interacción del usuario con URL especialmente manipuladas podría provocar la exposición de los tokens de acceso del usuario debido a un manejo inadecuado del Integración SSO basada en navegador CLI/IDE."}],"metrics":{"cvssMetricV31":[{"source":"reefs@jfrog.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"reefs@jfrog.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*","versionStartIncluding":"7.59.0","versionEndExcluding":"7.59.18","matchCriteriaId":"C24F3D9E-9364-4570-96ED-433AFFE5144C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*","versionStartIncluding":"7.63.5","versionEndExcluding":"7.63.18","matchCriteriaId":"A8B53DA3-129E-4030-AAEA-13DE15E2D99C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*","versionStartIncluding":"7.68.7","versionEndExcluding":"7.68.19","matchCriteriaId":"17B54888-01AA-45AC-BCA6-2AECBFE28CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*","versionStartIncluding":"7.71.2","versionEndExcluding":"7.71.8","matchCriteriaId":"D8B7666E-8012-403A-8D42-75BD4D82F16E"}]}]}],"references":[{"url":"https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories","source":"reefs@jfrog.com","tags":["Vendor Advisory"]},{"url":"https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}