CVE-2021-23163: JFrog Artifactory

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Affected products

• JFrog Artifactory: from 6.0.0, before 6.23.38 (fixed in 6.23.38); from 7.0.0, before 7.33.6 (fixed in 7.33.6)

Published 2022-07-06. Last modified 2026-06-17.