JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.CreditsDaniil Vylegzhanin (NetSPI)Referenceshttps://docs.jfrog.com/releases/docs/jfrog-security-advisorieshttps://docs.jfrog.com/releases/docs/artifactory-self-managed-releases