I updated Artifactory to the latest version 7.84.14 from 7.77.11.

After that I am getting Error 400 when I try to download an Artifact which is not on the most outer level of the Repo.

I suspect it has something to do with Tomcat and the option:
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH

Artifactory is stating that they updated Tomcat in 7.83.1 to 9.0.87 [1]. Tomcat writes they replaced the option with encodedSolidusHandling in 9.0.34 [2]. But i didn’t change anything in this regard.

But IDK if it’s really the issue, because the Error is pretty useless, and nothing gets logged, other than the request itself:

"GET /ui/api/v1/download?repoKey=ext-maven-ms-local&path=com%252Fgoogle%252Fcode%252Ffindbugs%252Fjsr305%252F3.0.2%252Fjsr305-3.0.2.jar HTTP/2.0" 400 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"

Error in Artifactory UI

Nginx Config

[1] https://jfrog.com/help/r/jfrog-release-information/artifactory-fixed-security-vulnerabilities?tocId=RmN~_12jNg_Wj1Kheh1IwQ

[2] https://tomcat.apache.org/tomcat-9.0-doc/changelog.html

Maybe someone has the same issue? Or can help me solve it.