Khai Tran | OpenAI

Potential unauthorized access to private Composer repository metadata in JFrog Artifactory

Authenticated users may view private Puppet module metadata

Authenticated users may access private NuGet metadata

Anonymous users may access restricted Artifactory repository information

Low-privilege users may remove protected Artifactory metadata

Authenticated users may write files outside the intended Artifactory work directory

Repository readers may access content outside configured upstream paths

Authenticated users may access restricted Artifactory support information

Private Release Bundle versions may be disclosed under specific configurations

Authenticated users may access private OCI referrer metadata