JFrog TrustReport A Vulnerability

Compliance

• Certificate Program
• Risk Assessment
• Privacy Center
• Sub-Processors List
• Shared Responsibility Model

Product Security

• Application Security

• Account Security

• Visibility & Monitoring

• JFrog Security Advisories Board

• Cloud Security

Data Security

• Data Encryption

• Data Management

• Security Incident Management

• Access Control & Identity Management

• Awareness & Education

• AI Transparency

• Government Access Request Policy

• Report a Vulnerability

• FAQ

Submit Vulnerability Report

Program highlights

Asset

• bintray.com
• conan.io
• connect.jfrog.io
• gocenter.io
• my.jfrog.com

Weakness

• Allocation of Resources Without Limits or Throttling (CWE-770)
• Authentication Bypass Using an Alternate Path or Channel (CWE-288)
• Cross-Site Scripting (XSS) - DOM (CWE-79)

Severity

• Low
• High

Proof of Concept

Title

Description

Impact

Summary

Steps To Reproduce:

1. 2. 3.

Supporting Material/References:

Review and Submit your report

Reporter Details

• Name:
• Email:
• Company:
• HackerOne User:

Summary:

Additional Notes

All submitted reports are confidential and we’ll address them by their severity. Please do not disclose the issue publicly until we assess its impact and mitigate the risk.