Apache: >> Archiva >> 1.1.3 Security Vulnerabilities
Users with write permissions to a repository can delete arbitrary directories.
CVSS Score
4.3
EPSS Score
0.001
Published
2022-11-15
If anonymous read enabled, it's possible to read the database file directly without logging in.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-11-15
In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8
CVSS Score
6.5
EPSS Score
0.003
Published
2022-05-25
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.
CVSS Score
5.3
EPSS Score
0.275
Published
2020-06-19
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
CVSS Score
6.5
EPSS Score
0.008
Published
2019-04-30
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights).
CVSS Score
8.0
EPSS Score
0.001
Published
2017-05-22
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
CVSS Score
4.8
EPSS Score
0.006
Published
2016-07-28
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin/addProxyConnector_commit.action, (2) new repositories via the token parameter to admin/addRepository_commit.action, (3) edit existing repositories via the token parameter to admin/editRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin/addLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin/saveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.
CVSS Score
8.8
EPSS Score
0.013
Published
2016-07-28
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
CVSS Score
6.8
EPSS Score
0.007
Published
2011-06-02
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score
4.3
EPSS Score
0.019
Published
2011-06-02
Page 1