// For flags

CVE-2018-1000623

 

Severity Score

7.2
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu -> Import & Export -> Repositories, triggers a vulnerable UI REST endpoint (/ui/artifactimport/upload) that can result in Directory traversal / file overwrite and remote code execution. This attack appear to be exploitable via An attacker with Admin privileges may use the aforementioned UI endpoint and exploit the publicly known "Zip Slip" vulnerability, to add/overwrite files outside the target directory. This vulnerability appears to have been fixed in 6.0.3.

JFrog JFrog Artifactory en versiones anteriores a la 6.0.3 y desde la versión 4.0.0 contiene una vulnerabilidad de salto de directorio en la característica "Import Repository from Zip", disponible mediante el menú Admin -> Import Export -> Repositories, que desencadena un endpoint UI REST vulnerable (/ui/artifactimport/upload) que puede resultar en un salto de directorio/sobrescritura de archivos y la ejecución remota de código. Un atacante con privilegios de administrador podría utilizar el endpoint UI mencionado anteriormente y explotar la vulnerabilidad públicamente conocida como "Zip Slip" para agregar o sobrescribir archivos fuera del directorio objetivo. La vulnerabilidad parece haber sido solucionada en la versión 6.0.3.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-07-09 CVE Reserved
  • 2018-07-09 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-10-12 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Jfrog
Search vendor "Jfrog"
 Artifactory
Search vendor "Jfrog" for product "Artifactory"
 >= 4.0.0 < 6.0.3
Search vendor "Jfrog" for product "Artifactory" and version " >= 4.0.0 < 6.0.3"
-
Affected