Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-70551

Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jfrog artifactory

Default version status: unaffected

  • 7.161.0 to < 7.161.19affected
  • 7.146.0 to < 7.146.36affected

References