The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass Most organizations do not think of their artifact repository as a security boundary. It is where build outputs go, and where dependencies come from. When an attacker takes it over, both directions of th...
Source: [Dev.to](https://dev.to/jeffreyciend/the-artifact-repository-is-a-trust-root-reading-the-jfrog-artifactory-authentication-bypass-38f6)