This vulnerability involves a path traversal issue (CWE-22) in JFrog Artifactory 7.161.0 that allows an authenticated user to write data outside the designated Docker cache directory when specific remote-repository conditions are met. The flaw could lead to unauthorized modification of files outside the intended directory scope. The CVSS 3.1 base score is 5.3, reflecting medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No known exploits are reported in the wild, and no official remediation or patch has been published by the vendor as of the data provided.

An authenticated user can write data outside the intended Docker cache path, potentially modifying files beyond the restricted directory. This impacts the integrity of the system but does not affect confidentiality or availability. The attack requires network access with low privileges and has high complexity, limiting ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor vendor communications for updates. Restricting access to trusted authenticated users and limiting exposure of the affected version may reduce risk until a patch is available.