Skip to content
OpenAdvisories
Low · 2.7 CVE-2021-46270 EUVD-2021-32970GHSA-34r5-hj3h-jf22

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repositor…

Published Mar 2, 2022 · Updated Aug 4, 2024 · Assigned by JFROG

Vendor: jfrog Product: JFrog Artifactory

Description

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation.

Affected products

VendorProductAffectedFixed
JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 – < 7.31.10 7.31.10

References