Khai Tran | OpenAI

Low-privilege users may remove protected Artifactory metadata

Anonymous users may access restricted Artifactory repository information

Authenticated users may access private NuGet metadata

Authenticated users may view private Puppet module metadata

Authenticated users may access private OCI referrer metadata

Repository readers may access content outside configured upstream paths

Authenticated users may write files outside the intended Artifactory work directory

Anonymous users may access restricted Artifactory content under specific configurations

Publishers without delete permission can overwrite docker layer information

Bundle writers may alter trusted release information in JFrog Artifactory