CVE-2026-65923

Published Jul 27, 2026

Last updated 20 days ago

Overview

Description
A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions.
Source
reefs@jfrog.com
NVD status
Analyzed
Products
artifactory

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.8
Impact score
5.2
Exploitability score
1.6
Vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity
MEDIUM

Weaknesses

reefs@jfrog.com
CWE-918

Social media

Hype score
Not currently trending

Configurations