CVE-2018-1000206

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/Exploit, Third Party Advisory
https://www.jfrog.com/jira/browse/RTFACT-17004Issue Tracking, Patch, Vendor Advisory
https://www.jfrog.com/jira/secure/ReleaseNote.jspa?projectId=10070&version=19581Release Notes, Vendor Advisory
https://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/Exploit, Third Party Advisory
https://www.jfrog.com/jira/browse/RTFACT-17004Issue Tracking, Patch, Vendor Advisory
https://www.jfrog.com/jira/secure/ReleaseNote.jspa?projectId=10070&version=19581Release Notes, Vendor Advisory

Timeline

Published: Jul 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-10002077.2MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpt CVE-2018-10002087.5MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result CVE-2018-10002098.8Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that CVE-2018-10002107.8YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deser CVE-2018-10002117.5Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can re CVE-2018-10002157.5Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). Th CVE-2018-10002168.8Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash CVE-2018-10002179.8Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible cr CVE-2018-10002185.4OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file' parameter in line #43 of interface/fax/fax_view.p CVE-2018-10002195.4OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan' parameter in line #41 of interface/fax/fax_view.p CVE-2018-10002219.8pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte al CVE-2018-10002228.8Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution .