CVE-2018-1000206

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions 5.11 through 6.0

Description The issue is related to a Cross-site Request Forgery (CSRF) vulnerability in UI rest endpoints. This can lead to a Classic CSRF attack, allowing an attacker to perform actions as a logged-in user. The attack is exploitable via a maliciously crafted flash component.

Recommendations For JFrog Artifactory versions 5.11 through 6.0, update to version 6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to UI rest endpoints to minimize the risk of exploitation. Avoid using maliciously crafted flash components until the issue is resolved.