medium5.3
CVE-2021-41834
JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-privileged user to r…
Impact
JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-privileged user to read and copy any artifact that exists in the Artifactory deployment due to improper permissions validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | before 6.23.38 from 7.0.0 before 7.28.0 |