vulnerability
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
CriticalCVSS 9.8
Summary
A critical vulnerability in JFrog Artifactory, patched just days after its disclosure, is being actively exploited by threat actors to gain administrative access. This allows attackers to poison build pipelines and escalate privileges, potentially leading to widespread damage within software supply chains. The vulnerability allows for easy generation of admin tokens and enumeration of user data.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data