Missing Authorization in Apache Archiva

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-29405 · ADVISORY
• archiva.apache.org/docs/2.2.8/release-notes.html · WEB

org.apache.archiva:archiva のその他の脆弱性

• CVE-2024-27139高 7.5** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauth…
• CVE-2024-27138高 7.5** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user regis…
• CVE-2023-28158中 5.4Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authentica…
• CVE-2020-9495中 5.3Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the conne…
• CVE-2019-0214中 6.5In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mec…