Non notée
CVE-2022-29405 In Apache Archiva, any registered user can reset password for any users
Description
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Archiva 2.2 | 2.2 → 2.2.7 | Pas de correctif indiqué |
Références
- archiva.apache.org archiva.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Archiva
Les 8 CVE de Apache Archiva →
CVE-2024-27138
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
Non notée
CVE-2024-27139
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
Non notée
CVE-2024-27140
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
Non notée
CVE-2023-28158
Privilege escalation via stored XSS using the file upload service to upload malicious content
6.5
Moyenne