CVE-2020-7931 Code injection in n/a
Remote attackers can execute arbitrary code via insecure FreeMarker template processing in JFrog Artifactory, potentially modifying SSH keys.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-7931?
CVE-2020-7931 is a high-severity code injection vulnerability in Jfrog Artifactory, published on 23 Jan 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template.
Which versions are affected by CVE-2020-7931?
1 open source package ship an affected version, including artifactory. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
artifactory Bitnami | All versions | 5.11.8, 6.1.6, 6.3.9, 6.7.8, 6.8.17, 6.9.6, 6.10.9, 6.11.7, 6.12.3, 6.13.2, 6.14.2, 6.15.1 |
Products include Jfrog Artifactory.
How do I fix CVE-2020-7931?
Upgrade artifactory to a fixed version for your release line: 5.11.8, 6.1.6, 6.3.9 or 6.7.8.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2020-7931 being exploited?
There is no known exploitation of CVE-2020-7931 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Jfrog Artifactory
- CVE-2026-82329 JFrog Artifactory Improper Authentication
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization
- CVE-2026-42018 JFrog Artifactory Improper Authentication
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory
- CVE-2019-17444 JFrog Artifactory does not enforce default admin password change
Sources
Also known as BIT-artifactory-2020-7931, GHSA-vp29-6rcm-8jf5.