| CVE-2024-27138 |
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
|
Non notée
|
1 mars 2024 |
| CVE-2024-27139 |
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache…
|
Non notée
|
1 mars 2024 |
| CVE-2024-27140 |
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
|
Non notée
|
1 mars 2024 |
| CVE-2023-28158 |
Privilege escalation via stored XSS using the file upload service to upload malicious content
|
6.5
Moyenne
|
29 mars 2023 |
| CVE-2022-40309 |
Users with write permissions to a repository can delete arbitrary directories
|
4.3
Moyenne
|
15 nov. 2022 |
| CVE-2022-40308 |
If anonymous read enabled, it's possible to read the database file directly without logging in
|
7.5
Élevée
|
15 nov. 2022 |
| CVE-2022-29405 |
In Apache Archiva, any registered user can reset password for any users
|
Non notée
|
25 mai 2022 |
| CVE-2017-5657 |
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks
|
Non notée
|
22 mai 2017 |