High severity · published Jul 13, 2018
CVE-2018-1000206
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to…
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Artifactory · Jfrog
5.11.0 before 6.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1000206
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1000206
Exploit
https://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/
Issue Tracking
https://www.jfrog.com/jira/browse/RTFACT-17004
Release Notes
https://www.jfrog.com/jira/secure/ReleaseNote.jspa?projectId=10070&version=19581
More from Artifactory
9.8
CVE-2026-82329
Potential authentication bypass leading to administrative access in Artifactory
8.8
CVE-2026-42016
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
7.5
CVE-2026-42018
Anonymous user token generation exposure in JFrog Artifactory
5.3
CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
9.8
CVE-2022-0668
JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated…