PT-2018-9476

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 6.0.3 Description The issue concerns a Directory Traversal vulnerability in the "Import Repository from Zip" feature, accessible through the Admin menu - Import & Export - Repositories. This feature triggers...

CVE-2018-1000623: Improper Limitation of a Pathname to a Restricted Directory

JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu - Import & Export - Repositories, triggers a vulnerable UI REST endpoint /ui/artifactimport/upload...