fr Sign in

4.3 Medium

CVE-2022-40309 Users with write permissions to a repository can delete arbitrary directories

Description

Users with write permissions to a repository can delete arbitrary directories.

Affected products and versions

Product	Affected versions	Fixed in
Apache Archiva 2.2	earliest → 2.2.8	No fix stated

References

lists.apache.org lists.apache.org
[oss-security] 20221115 CVE-2022-40309: Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories www.openwall.com

Timeline

Published November 15, 2022
Last modified April 30, 2025

The 8 CVEs of Apache Archiva →

CVE-2024-27138 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva Not rated CVE-2024-27139 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache… Not rated CVE-2024-27140 ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')… Not rated CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content 6.5 Medium

Track this CVE