漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu -> Import & Export -> Repositories, triggers a vulnerable UI REST endpoint (/ui/artifactimport/upload) that can result in Directory traversal / file overwrite and remote code execution. This attack appear to be exploitable via An attacker with Admin privileges may use the aforementioned UI endpoint and exploit the publicly known "Zip Slip" vulnerability, to add/overwrite files outside the target directory. This vulnerability appears to have been fixed in 6.0.3.
漏洞信息
N/A
漏洞
N/A
漏洞
JFrog JFrog Artifactory 路径遍历漏洞
漏洞信息
JFrog Artifactory是以色列JFrog公司的一款开源的通用Artifact存储库管理器，它支持集群和高可用性Docker注册表并提供端到端的用于跟踪从开发到生产的工件自动化解决方案。 JFrog JFrog Artifactory 4.0.0版本至6.0.3之前版本中的‘Import Repository from Zip’功能存在目录遍历漏洞。攻击者可利用该漏洞覆盖文件并执行代码。
漏洞信息
N/A
漏洞
N/A