6.5
Medium
CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content
Description
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Archiva 2.0 | 2.0 → < 2.2.10 | 2.2.10 |
References
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Apache Archiva
The 8 CVEs of Apache Archiva →
CVE-2024-27138
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
Not rated
CVE-2024-27139
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
Not rated
CVE-2024-27140
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
Not rated
CVE-2022-40308
If anonymous read enabled, it's possible to read the database file directly without logging in
7.5
High