CERT24CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalogLoading data…

CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to its KEV catalog: two affecting JFrog Artifactory, one affecting ConnectWise ScreenConnect, and one affecting GitLab. The source describes chaining the Artifactory flaws to obtain administrative control, unauthorized file transfer and execution through ScreenConnect, and active probing and exploitation attempts targeting the GitLab flaw.

← Back to intelligence

CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to its KEV catalog: two affecting JFrog Artifactory, one affecting ConnectWise ScreenConnect, and one affecting GitLab. The source describes chaining the Artifactory flaws to obtain administrative control, unauthorized file transfer and execution through ScreenConnect, and active probing and exploitation attempts targeting the GitLab flaw.