Vulnerabilities > Jfrog > High

DATE CVE VULNERABILITY TITLE RISK
2018-07-09 CVE-2018-1000623 Path Traversal vulnerability in Jfrog Artifactory
JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu -> Import & Export -> Repositories, triggers a vulnerable UI REST endpoint (/ui/artifactimport/upload) that can result in Directory traversal / file overwrite and remote code execution.
network
low complexity
jfrog CWE-22
7.2