Missing Authorization in Apache Archiva

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-29405 · ADVISORY
• archiva.apache.org/docs/2.2.8/release-notes.html · WEB

Lỗ hổng khác của org.apache.archiva:archiva

• CVE-2024-27139CAO 7.5** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauth…
• CVE-2024-27138CAO 7.5** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user regis…
• CVE-2023-28158TRUNG BÌNH 5.4Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authentica…
• CVE-2020-9495TRUNG BÌNH 5.3Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the conne…
• CVE-2019-0214TRUNG BÌNH 6.5In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mec…