Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-40308 · ADVISORY
• archiva.apache.org/security.html · WEB
• apache/archiva · PACKAGE
• lists.apache.org/thread/x01pnn0jjsw512cscxsbxzrjmz64n4cc · WEB
• openwall.com/lists/oss-security/2022/11/15/2 · WEB

org.apache.archiva:archiva-common のその他の脆弱性

• CVE-2024-27140中 5.4** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apach…
• CVE-2022-40309中 4.3Users with write permissions to a repository can delete arbitrary directories.