Skip to content
Sign in
Not rated

CVE-2019-0214 In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the…

Description

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.

Affected products and versions

Product Affected versions Fixed in
Apache Archiva Versions not published

Other CVEs of Apache Archiva

The 2 CVEs of Apache Archiva →
CVE-2019-0213 In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e Not rated
Track this CVE