SSRF In CocoaPods Via JFrog Artifactory External Dependency

Description

Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.

Affected Products

Also Affects

Downstream vendors/products affected by this vulnerability

References

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories(vendor-advisory)
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases(vendor-advisory)

Related News (2 articles)