jfrog-artifactory-build-exposure: JFrog Artifactory Build - Exposure

2026-01-08 JFrog Artifactory PoC Public

Description

Detected exposure of build information in JFrog Artifactory via unauthenticated API endpoints. Access to these endpoints may disclose sensitive data such as build names, numbers, CI/CD pipeline details, artifact paths, and internal infrastructure information.

PoC

id: jfrog-artifactory-build-exposure

info:
  name: JFrog Artifactory Build - Exposure
  author: theamanrawat
  severity: medium
  description: |
    Detected exposure of build information in JFrog Artifactory via unauthenticated API endpoints. Access to these endpoints may disclose sensitive data such as build names, numbers, CI/CD pipeline details, artifact paths, and internal infrastructure information.
  reference:
    - https://jfrog.com/help/r/jfrog-rest-apis/builds
    - https://jfrog.com/artifactory/
  metadata:
    verified: true
    max-request: 1
    shodan-query: 'http.title:"Artifactory"'
    fofa-query: 'title="Artifactory"'
  tags: jfrog,artifactory,exposure,misconfig,cicd,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/artifactory/api/build"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"builds"'
          - '"uri"'
          - '"lastStarted"'
        condition: and

      - type: word
        part: content_type
        words:
          - "application/json"
          - "application/vnd.org.jfrog"
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a004730450220475e5dfde4cb291bcfb197fc5ca26b7014294d4f87ec91502394f98152dcbd95022100d18ea931d7cb02223aa059d016324e0d69babd3500d9d47dd85b2aebb0726639:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/configs/jfrog-artifactory-build-exposure.yaml

References

Related Vulnerabilities