JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

What happened

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions.

Affected versions

Artifactory: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

• Review the original advisory and validate affected versions.
• Apply vendor-provided updates or mitigations when available.