CVE-2021-46270: JFrog Artifactory

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation.

Affected products

• JFrog Artifactory: from 7.0.0, before 7.31.10 (fixed in 7.31.10)

Published 2022-03-02. Last modified 2026-06-17.