Description

In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."

Remediation

References

CVE-2019-19937

Related Vulnerabilities

Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5692)

WordPress Plugin Clean Login Cross-Site Scripting (1.12.6.3)

WordPress Plugin Custom Scrollbar Designer Cross-Site Scripting (1.0)

WordPress Plugin Job Manager Cross-Site Scripting (0.7.25)

Severity

High

Classification

CVE-2019-19937 CWE-20 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities