This vulnerability allows an authenticated user of Artifactory to write files outside the designated work directory, potentially leading to unauthorized file manipulation. The issue stems from insufficient validation of file paths, classified under CWE-22 (Path Traversal). The CVSS 3.1 base score is 4.3, indicating medium severity with network attack vector, low attack complexity, and requiring privileges but no user interaction. No affected versions or patch information are specified in the available data.

An authenticated user can write files outside the intended directory, which may lead to unauthorized file modifications or overwrites. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, monitor vendor communications for updates. Restrict authenticated user permissions as a precautionary measure until a fix is available.