Description

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.

Remediation

References

CVE-2018-1000206

Related Vulnerabilities

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35157)

SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17372)

Oracle JRE CVE-2013-2412 Vulnerability (CVE-2013-2412)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0213)

WordPress Plugin WBW Currency Switcher for WooCommerce Cross-Site Scripting (1.6.5)

Severity

High

Classification

CVE-2018-1000206 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities