CVE-2021-46270: JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to…

PriorityP410low2.7CVSS 3.1

AVNACLPRHUINSUCLINAN

EPSS

0.62%

45.0th percentile

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
jfrog	artifactory	>= 7.0.0 < 7.31.10	7.31.10
jfrog	jfrog_artifactory	>= JFrog Artifactory versions before 7.31.10 < 7.31.10	7.31.10

CVSS provenance

nvdv3.12.7LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.