Privilege escalation via stored XSS using the file upload service to upload malicious content. The issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user.
Max CVSS
6.5
EPSS Score
0.06%
Published
2023-03-29
Updated
2023-04-18
Users with write permissions to a repository can delete arbitrary directories.
Max CVSS
4.3
EPSS Score
0.08%
Published
2022-11-15
Updated
2022-11-17
If anonymous read enabled, it's possible to read the database file directly without logging in.
Max CVSS
7.5
EPSS Score
0.18%
Published
2022-11-15
Updated
2022-11-17
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
Max CVSS
6.5
EPSS Score
0.06%
Published
2022-05-25
Updated
2022-06-06
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.
Max CVSS
5.3
EPSS Score
0.61%
Published
2020-06-19
Updated
2020-06-24
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Max CVSS
6.5
EPSS Score
0.39%
Published
2019-04-30
Updated
2021-07-21
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
Max CVSS
6.5
EPSS Score
0.33%
Published
2019-04-30
Updated
2020-08-24
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).
Max CVSS
8.0
EPSS Score
0.10%
Published
2017-05-22
Updated
2019-04-16
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
Max CVSS
4.8
EPSS Score
0.09%
Published
2016-07-28
Updated
2019-04-16
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin/addProxyConnector_commit.action, (2) new repositories via the token parameter to admin/addRepository_commit.action, (3) edit existing repositories via the token parameter to admin/editRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin/addLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin/saveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.
Max CVSS
8.8
EPSS Score
0.58%
Published
2016-07-28
Updated
2019-04-16
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.
Max CVSS
4.3
EPSS Score
3.08%
Published
2014-04-22
Updated
2018-10-09
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.18%
Published
2011-06-02
Updated
2018-10-09
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
Max CVSS
6.8
EPSS Score
0.16%
Published
2011-06-02
Updated
2018-10-09
Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.
Max CVSS
4.3
EPSS Score
0.18%
Published
2011-02-17
Updated
2018-10-09
Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.
Max CVSS
6.8
EPSS Score
0.39%
Published
2010-12-06
Updated
2018-10-10
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.
Max CVSS
6.8
EPSS Score
1.54%
Published
2010-12-06
Updated
2018-10-10
16 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!