This vulnerability (CWE-345) in JFrog Artifactory 7.161.0 allows an unauthenticated attacker to cause untrusted package content to be cached. The issue stems from insufficient verification of data authenticity, which may lead to compromised artifact integrity and availability. The CVSS 3.1 score is 8.1, indicating a high impact with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, but high integrity and availability impacts. No official patch or remediation level has been provided by the vendor as of the publication date.

An attacker can cause untrusted or malicious package content to be cached in the affected Artifactory instance, potentially compromising the integrity of artifacts and causing availability issues. This could disrupt software supply chains relying on the integrity of cached packages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor JFrog's advisories for updates. Until a fix is available, consider restricting access to the affected version and applying additional validation controls on cached content if possible.