Description
JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| artifactory | jfrog / artifactory | >= 0, < 7.146.35 | affected |
| artifactory | jfrog / artifactory | >= 7.161.0, < 7.161.16 | affected |