VULNERABILITY INTELLIGENCE

CVE-2018-1000206

CVSS score8.8 HIGH

EPSS probability0.76%

CISA KEVNot currently listed

Published2018-07-13

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.

Weakness classification

nvd@nist.gov: CWE-352

Primary references

cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Issue Tracking, Patch, Vendor Advisory
cve@mitre.org — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory