CVE-2019-19937

2020-03-1620:15:12

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.4%

JSON

In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to “undesirable results.”

References

www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting

www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18

www.secureworks.com/research/subject/advisories