Kostya Kortchinsky | OpenAI

Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

Potential package cache integrity issue in JFrog Artifactory

Potential unauthorized metadata exposure in JFrog Artifactory

Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

SSRF In CocoaPods Via JFrog Artifactory External Dependency

Potential unauthorized repository migration in JFrog Artifactory

Authenticated users may write data outside the intended Docker cache path

Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability

Potential remote code execution on an Artifactory package service container.

Potential privilege escalation to JFrog administrator privileges