8.8
CVE-2026-65921
- EPSS 0.37%
- Veröffentlicht 27.07.2026 19:27:31
- Zuletzt bearbeitet 30.07.2026 14:51:26
- CVE-Watchlists
- Unerledigt
Potential path traversal leading to unauthorized file writes
A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jfrog ≫ Artifactory SwPlatform- Version < 7.111.18
Jfrog ≫ Artifactory SwPlatform- Version >= 7.117.0 < 7.117.25
Jfrog ≫ Artifactory SwPlatform- Version >= 7.125.0 < 7.125.18
Jfrog ≫ Artifactory SwPlatform- Version >= 7.133.0 < 7.133.27
Jfrog ≫ Artifactory SwPlatform- Version >= 7.146.0 < 7.146.34
Jfrog ≫ Artifactory SwPlatform- Version >= 7.161.0 < 7.161.15
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.302 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| reefs@jfrog.com | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases