Authenticated users may write data outside the intended Docker cache path

Description

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Affected Products

Also Affects

Downstream vendors/products affected by this vulnerability

References

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories(vendor-advisory)
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases(vendor-advisory)

Related News (2 articles)