CVE-2026-65618: Artifactory: sunucu taraflı istek sahteciliği (SSRF)

Açıklama (NVD)

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.

Özet bilgiler

Ürün

Jfrog Artifactory

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,35 (yüzdelik 29)

CWE

CWE-918

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• docs.jfrog.com
• docs.jfrog.com
• CWE-918