6.5
Moyenne
CVE-2023-28158 Privilege escalation via stored XSS using the file upload service to upload malicious content
Description
Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Archiva 2.0 | 2.0 → < 2.2.10 | 2.2.10 |
Références
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Archiva
Les 8 CVE de Apache Archiva →
CVE-2024-27138
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
Non notée
CVE-2024-27139
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
Non notée
CVE-2024-27140
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
Non notée
CVE-2022-40308
If anonymous read enabled, it's possible to read the database file directly without logging in
7.5
Élevée