-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:artifactory | maven | <= 3.2.2 |
Miggo AIRoot Cause AnalysisThe vulnerability documentation explicitly references ArtifactoryBuilder.DescriptorImpl#doTestConnection in multiple sources (NVD description, Talos report TALOS-2019-0787, and Jenkins advisory SECURITY-1015). The method handles form validation without: 1) verifying user permissions beyond Overall/Read access, and 2) enforcing POST request requirements. This allows attackers to abuse the endpoint via CSRF to exfiltrate credentials. The Talos report provides technical confirmation of the exploit flow involving this method.
Ongoing coverage of React2Shell