Description
JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JFrog | Artifactory | 7.x – < 7.31.10 | 7.31.10 |