2 matches found
Input validation
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorizedkeys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certa...
6.5CVSS8.8AI score0.0549EPSS
SaveExploits2References2Affected Software1
20