CNNVD-202601-802 Information

CNNVD ID

CNNVD-202601-802

CVE-2025-14830

  • CNNVD Published: 2026-01-04

Description (Chinese)

JFrog Artifactory Workers是美国JFrog公司的一个扩展服务。 JFrog Artifactory Workers 7.94.0版本至7.117.10之前版本存在跨站脚本漏洞,该漏洞源于网页生成期间输入中和不当,可能导致跨站脚本攻击。

Description (English)

JFrog Artifactory Workers is an extension service of the United States company JFrog. JFrog Artifactory Works 7.94.0 to 7.117.10 had a cross-site script loophole, which stemmed from inappropriate input during web page generation and could lead to cross-site script attacks.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

JFrog

Published

2026-01-04

Last Modified

2026-02-24

References

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories https://access.redhat.com/security/cve/cve-2025-14830

Patch

https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories

Share on: