Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-40308 · ADVISORY
• archiva.apache.org/security.html · WEB
• apache/archiva · PACKAGE
• lists.apache.org/thread/x01pnn0jjsw512cscxsbxzrjmz64n4cc · WEB
• openwall.com/lists/oss-security/2022/11/15/2 · WEB

Lỗ hổng khác của org.apache.archiva:archiva-common

• CVE-2024-27140TRUNG BÌNH 5.4** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apach…
• CVE-2022-40309TRUNG BÌNH 4.3Users with write permissions to a repository can delete arbitrary directories.