| CVE-2024-27138 |
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
|
Not rated
|
Mar 1, 2024 |
| CVE-2024-27139 |
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
|
Not rated
|
Mar 1, 2024 |
| CVE-2024-27140 |
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
|
Not rated
|
Mar 1, 2024 |
| CVE-2023-28158 |
Privilege escalation via stored XSS using the file upload service to upload malicious content
|
6.5
Medium
|
Mar 29, 2023 |
| CVE-2022-40309 |
Users with write permissions to a repository can delete arbitrary directories
|
4.3
Medium
|
Nov 15, 2022 |
| CVE-2022-40308 |
If anonymous read enabled, it's possible to read the database file directly without logging in
|
7.5
High
|
Nov 15, 2022 |
| CVE-2022-29405 |
In Apache Archiva, any registered user can reset password for any users
|
Not rated
|
May 25, 2022 |
| CVE-2017-5657 |
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks
|
Not rated
|
May 22, 2017 |