CVE-2021-46687: JFrog Artifactory

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Affected products

• JFrog Artifactory: from 6.0.0, before 6.23.38 (fixed in 6.23.38); from 7.0.0, before 7.31.10 (fixed in 7.31.10)

Published 2022-07-06. Last modified 2026-06-17.