CVE-2022-0573

Published: May 16, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.

Affected (13)

Products: Jfrog: Artifactory

Jfrog

1 product

Artifactory

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Jfrog Artifactory	6.0.0 ≤ version < 6.23.41
Jfrog Artifactory	7.0.0 ≤ version < 7.17.16
Jfrog Artifactory	7.18.0 ≤ version < 7.18.12
Jfrog Artifactory	7.19.0 ≤ version < 7.19.13
Jfrog Artifactory	7.21.0 ≤ version < 7.21.25
Jfrog Artifactory	7.25.0 ≤ version < 7.25.9
Jfrog Artifactory	7.27.0 ≤ version < 7.27.15
Jfrog Artifactory	7.29.0 ≤ version < 7.29.10
Jfrog Artifactory	7.31.0 ≤ version < 7.31.16
Jfrog Artifactory	7.33.0 ≤ version < 7.33.12
Jfrog Artifactory	7.34.0 ≤ version < 7.34.4
Jfrog Artifactory	Version 7.35.0
Jfrog Artifactory	Version 7.36.0