Description

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Remediation

References

CVE-2021-23163

Related Vulnerabilities

WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.2.7)

PostgreSQL Other Vulnerability (CVE-2003-0901)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36401)

WordPress Plugin ALO EasyMail Newsletter Cross-Site Request Forgery (2.9.2)

MySQL CVE-2018-2590 Vulnerability (CVE-2018-2590)

Severity

High

Classification

CVE-2021-23163 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities