en Se connecter

4.3 Moyenne

CVE-2022-40309 Users with write permissions to a repository can delete arbitrary directories

Description

Users with write permissions to a repository can delete arbitrary directories.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Archiva 2.2	premières → 2.2.8	Pas de correctif indiqué

Références

lists.apache.org lists.apache.org
[oss-security] 20221115 CVE-2022-40309: Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories www.openwall.com

Chronologie

Publiée 15 novembre 2022
Dernière modification 30 avril 2025

Les 8 CVE de Apache Archiva →

CVE-2024-27138 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva Non notée CVE-2024-27139 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache… Non notée CVE-2024-27140 ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')… Non notée CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content 6.5 Moyenne

Suivre cette CVE