Jfrog

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Build readers can access another repository's environment properties. A caller with read access to an ordinary repositor

An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account c

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific condi

A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and ret

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository acc

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written ou

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentia

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administra

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged use

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a valida