| Package | Affected versions | Patched versions |
|---|---|---|
| archiva | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.2= 1.2.1= 1.2.2= 1.3= 1.3.1 | |
| redback | = 1.0= 1.0.1= 1.0.2= 1.0.3= 1.1= 1.1.1= 1.1.2= 1.2= 1.2.1= 1.2.2≤ 1.2.3 |
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free