Cross-Site Request Forgery in JFrog Artifactory by JFrog
CVE-2018-1000206
Key Information:
- Vendor
Jfrog
- Status
- Vendor
- CVE Published:
- 13 July 2018
Badges
What is CVE-2018-1000206?
JFrog Artifactory versions 5.11 and earlier are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability within its UI REST endpoints. Attackers may exploit this flaw to perform unauthorized actions on behalf of authenticated users if the victims unknowingly run a specially crafted Flash component. This issue has been resolved in version 6.1 of Artifactory, emphasizing the importance of software updates for security.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.