PT-2020-19854 · Jfrog · Jfrog Artifactory

Ryan Hanson · Published 2020-01-23 · Updated 2024-03-06 · CVE-2020-7931

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions 5.x through 6.x

Description The issue is caused by insecure FreeMarker template processing, which can lead to remote code execution. This can be achieved, for example, by modifying a .ssh/authorized keys file. The problem arises because the use of the DefaultObjectWrapper class makes certain Java functions accessible to a template.

Recommendations For versions between 5.11.8 and 6.16.0, apply the available patches to resolve the issue. At the moment, there is no information about additional mitigation measures for other versions.

Exploit

Fix

Related Identifiers

BIT-ARTIFACTORY-2020-7931

CVE-2020-7931

Affected Products

Jfrog Artifactory

References · 7

• 🔥 https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0006.md · Exploit
• 🔥 https://github.com/gquere/CVE-2020-7931 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7931 · Security Note
• https://osv.dev/vulnerability/BIT-artifactory-2020-7931 · Vendor Advisory
• https://jfrog.com/confluence/display/RTF/Release+Notes · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7931 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/1828 · Telegram Post