Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Artifactory Vulnerability - CVE-2020-7931 - Vulnerability Database
Artifactory

Artifactory Vulnerability - CVE-2020-7931

High
Reference: CVE-2020-7931
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-7931
Title: Artifactory Vulnerability
Overview:

In JFrog Artifactory 5.x and 6.x insecure FreeMarker template processing leads to remote code execution e.g. by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template.