113 matches found
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions...
VulnCheck KEV: CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
PT-2026-81333
Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.161.19 JFrog Artifactory versions prior to 7.146.36 Description An authenticated user with permissions to read an existing remote Version Control System VCS repository can trigger server-side requests. Thi...
CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...
CVE-2026-68753
Technical details for CVE-2026-68753 are not provided in the supplied documents; no affected products, versions, or remediation are specified. Monitor for updates.
EUVD-2026-57242
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
CVE-2026-68753 Anonymous users may access restricted Artifactory content under specific configurations
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
PT-2026-71108
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way...
PT-2026-71124
Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.146.35 JFrog Artifactory versions 7.161.0 through 7.161.15 Description An authenticated user can manipulate a file path during Docker cache operations under specific remote-repository conditions. This allo...
CVE-2026-72770 n8n before 1.123.67 Path Traversal via Git Node Operations
n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point allowlisted remote configurations at...
CVE-2026-65925
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...
CVE-2026-65924 Server-Side Request Forgery (SSRF) via Terraform Remote repository
JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery SSRF. An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary...
CVE-2026-65924
JFrog Artifactory's Terraform remote repository support is affected by a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user, or an unauthenticated user if anonymous access is enabled, can cause Artifactory to issue outbound HTTP requests to arbitrary destinations and receive ...
CVE-2026-65925
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...
CVE-2026-65925
CVE-2026-65925 describes a Server-Side Request Forgery (SSRF) in JFrog Artifactory when using the Cargo remote repository. A user with read access to the Cargo remote repository could cause Artifactory to request unintended URLs and return the response. The CVSS 3.1 vector is NETWORK, PRIVILEGES ...