Not rated
CVE-2022-29405 In Apache Archiva, any registered user can reset password for any users
Description
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Archiva 2.2 | 2.2 → 2.2.7 | No fix stated |
References
- archiva.apache.org archiva.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Archiva
The 8 CVEs of Apache Archiva →
CVE-2024-27138
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
Not rated
CVE-2024-27139
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
Not rated
CVE-2024-27140
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
Not rated
CVE-2023-28158
Privilege escalation via stored XSS using the file upload service to upload malicious content
6.5
Medium